Robert SpeicherandRobert Speicher 806cc20803 Merge branch 'fix-impersonation-issue' into 'master' ...

Prevent privilege escalation via "impersonate" feature

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15548

See merge request !1956

2016-04-25 16:58:52 -04:00

..

admin

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 16:58:52 -04:00

groups

Fix Error 500 when creating global milestones with Unicode characters

2015-12-05 00:04:44 -08:00

import

Fix duplicate repositories in GitHub import page

2015-10-19 10:39:59 -07:00

profiles

Bump devise-two-factor to 2.0.0

2015-09-19 21:16:18 -04:00

projects

Merge branch 'serve_lfs_object' into 'master'

2015-12-08 14:19:52 +00:00

abuse_reports_controller_spec.rb

fix specs

2015-11-30 16:12:31 +02:00

application_controller_spec.rb

Fix 403 Access Denied error messages when accessing Labels section in a project that has MRs disabled but issues enabled

2015-06-18 03:15:05 -07:00

autocomplete_controller_spec.rb

Reduce method complexity in AutocompleteController

2015-11-20 13:49:24 +01:00

blame_controller_spec.rb

Fix blame view line groupings

2015-08-20 01:27:29 -07:00

blob_controller_spec.rb

Fix Style/AlignHash cop violations

2015-06-22 22:24:39 -07:00

branches_controller_spec.rb

Fix errors deleting and creating branches with encoded slashes

2015-08-01 23:33:33 -07:00

commit_controller_spec.rb

Fix 500 error when creating a merge request that removes a submodule

2015-12-04 17:35:14 -02:00

commits_controller_spec.rb

Fix Style/AlignHash cop violations

2015-06-22 22:24:39 -07:00

help_controller_spec.rb

Fix Style/AlignHash cop violations

2015-06-22 22:24:39 -07:00

invites_controller_spec.rb

Redirect to a default path if HTTP_REFERER is not set

2015-10-20 07:45:48 -07:00

namespaces_controller_spec.rb

Fix tests and improve wording

2015-09-14 14:16:08 +02:00

profile_keys_controller_spec.rb

Only publish ssh key-type and key

2015-08-04 14:33:18 +02:00

projects_controller_spec.rb

Fix 404 in redirection after removing a project

2015-11-25 23:11:35 -08:00

root_controller_spec.rb

Add user preference to view project activity and starred project activity as default dashboard

2015-09-26 08:46:05 -07:00

sessions_controller_spec.rb

Merge branch 'fix/2fa-authentication-spoofing' into 'master'

2016-04-07 14:39:08 -04:00

snippets_controller_spec.rb

Fix raw private snippets access workflow

2015-11-25 18:16:27 -02:00

uploads_controller_spec.rb

Make all group public

2015-09-09 11:27:03 +03:00

users_controller_spec.rb

Refactor UsersController to not kill the database

2015-11-18 13:05:45 +01:00