home/gitlabhq
2
0
Fork 0
mirror of https://github.com/wahyd4/gitlabhq.git synced 2026-08-10 05:06:46 +10:00
Code Issues Packages Projects Releases Wiki Activity
Files
8-7-stable
gitlabhq/spec/lib/gitlab
T
History
Douwe MaanandRobert Speicher 142324ac13 Merge branch '19312-confidential-issue' into 'master' 
Fix privilege escalation issue with OAuth external users

Related to https://gitlab.com/gitlab-org/gitlab-ce/issues/19312

This MR fixes a privilege escalation issue, where manually set external users would be reverted back to internal users if they logged in via OAuth and that provider was not in the `external_providers` list.

/cc @douwe

See merge request !1975
(cherry picked from commit 5e6342b7ac)
2016-06-30 14:38:49 -04:00
..
backend
Fix after column rename
2015-12-11 18:02:10 +01:00
badge
Extend build status badge, add html/markdown methods
2016-04-06 19:56:34 +02:00
bitbucket_import
Merge branch 'fix/import-url-issues' into 'master'
2016-05-11 11:00:01 +02:00
ci/build/artifacts
Add method that calculates total size for artifacts subfolder
2016-01-20 21:55:13 +01:00
diff
Show a notice for diffs that are too large
2016-03-18 12:30:46 +01:00
email
Improve and finish the fallback to the In-Reply-To and References header for the reply-by-email feature
2016-03-25 13:05:15 +01:00
fogbugz_import
updated spec
2016-03-31 09:22:28 +02:00
gfm
Fix rubocop offenses in upload rewriter specs
2016-03-31 10:41:57 +02:00
github_import
Merge branch 'gh-review-comments' into 'master'
2016-05-05 19:35:54 +02:00
gitlab_import
Tag lib specs
2015-12-09 11:55:42 +01:00
gitorious_import
Tag lib specs
2015-12-09 11:55:42 +01:00
google_code_import
refactored code based on feedback plus fixed a couple of other issues
2016-03-28 16:35:03 +02:00
ldap
Unblocks user when active_directory is disabled and it can be found
2016-04-05 16:34:31 -03:00
lfs
Tag lib specs
2015-12-09 11:55:42 +01:00
metrics
Count the number of SQL queries per transaction
2016-04-18 14:53:13 +02:00
middleware
Revert "Revert "Merge branch 'support-go-subpackages' into 'master' ""
2016-03-12 21:05:23 +00:00
o_auth
Merge branch '19312-confidential-issue' into 'master'
2016-06-30 14:38:49 -04:00
saml
Implemented suggested fixes
2016-04-06 18:12:25 -05:00
sherlock
Tag lib specs
2015-12-09 11:55:42 +01:00
sql
Tag lib specs
2015-12-09 11:55:42 +01:00
akismet_helper_spec.rb
Support Akismet spam checking for creation of issues via API
2016-02-02 11:25:44 -02:00
asciidoc_spec.rb
Fix relative links in other markup formats
2016-02-12 17:20:59 +01:00
auth_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
blame_spec.rb
Move blame group logic to dedicated class
2016-01-28 14:49:21 +01:00
build_data_builder_spec.rb
Suppress e-mails on failed builds if allow_failure is set
2016-01-07 10:45:39 -08:00
closing_issue_extractor_spec.rb
Remove dumb debug statement and add many tests.
2016-04-07 08:47:29 -04:00
color_schemes_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
database_spec.rb
Fix undefined method postgresql? during migration
2016-02-15 14:13:47 -05:00
exclusive_lease_spec.rb
Improve test descriptions
2016-03-10 12:55:06 +01:00
git_access_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
git_access_wiki_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
highlight_spec.rb
Add missing specs
2016-01-19 16:26:44 +01:00
import_url_spec.rb
more refactoring
2016-03-21 15:11:05 +01:00
incoming_email_spec.rb
Improve and finish the fallback to the In-Reply-To and References header for the reply-by-email feature
2016-03-25 13:05:15 +01:00
key_fingerprint_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
markup_helper_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
metrics_spec.rb
Merge branch 'fix-grape-internal-allowed-action' into 'master'
2016-04-21 10:17:33 +00:00
note_data_builder_spec.rb
Refactor and expose only Gitlab::UrlBuilder.build(record)
2016-04-13 16:07:04 +02:00
popen_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
project_search_results_spec.rb
Restrict access to confidential issues on search results
2016-03-17 20:55:59 -03:00
push_data_builder_spec.rb
Using single builder for push and tag events
2016-04-19 11:00:30 +02:00
reference_extractor_spec.rb
Update reference unfolder according to recent ability changes
2016-03-19 18:58:52 +01:00
regex_spec.rb
Allow "@" in file names and path
2016-02-01 16:20:49 +01:00
search_results_spec.rb
Restrict access to confidential issues on search results
2016-03-17 20:55:59 -03:00
snippet_search_results_spec.rb
Refactor Gitlab::SnippetSearchResults
2016-03-11 15:25:22 -05:00
themes_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
upgrader_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
uploads_transfer_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
url_builder_spec.rb
Merge branch 'slack_wiki_notifications' into 'master'
2016-04-20 10:49:31 +02:00
version_info_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
workhorse_spec.rb
First version of "git archive" headers
2016-02-02 14:09:55 +01:00