Douwe MaanandRobert Speicher 65d3a647bc Merge branch '18033-private-repo-mentions' into 'master' ...

Ensure logged-out users can't see private refs

https://gitlab.com/gitlab-org/gitlab-ce/issues/18033

I'm still not sure what to do about the CHANGELOG on security issues - should I add to a patch release? This issue was assigned to 8.10.

See merge request !1974
(cherry picked from commit 3a6ebb1fd6)

2016-06-30 14:52:52 -04:00

..

ci

Fix commit_spec: invalid validation

2016-03-14 13:20:35 +01:00

concerns

Merge branch '18033-private-repo-mentions' into 'master'

2016-06-30 14:52:52 -04:00

hooks

minor cleanup in system_hook_spec

2016-03-30 20:00:57 +02:00

members

Tag model specs

2015-12-09 10:50:51 +01:00

project_services

Merge branch '15437-fix-xss-in-issue-tracker-service' into 'master'

2016-04-25 21:55:52 +00:00

abuse_report_spec.rb

Clearify who deletes the user

2016-03-15 21:09:25 +01:00

appearance_spec.rb

Branded login page also in CE

2016-02-26 15:50:51 +01:00

application_setting_spec.rb

Remove "Congratulations!" tweet button on newly-created project.

2016-03-31 17:09:36 -06:00

blob_spec.rb

Add a Blob model that wraps Gitlab::Git::Blob

2016-02-18 22:45:30 -05:00

broadcast_message_spec.rb

Move BroadcastMessage#status to a helper since it's presentational

2016-01-13 11:49:59 -05:00

build_spec.rb

Remove code that removes duplicate CI variables

2016-04-18 13:17:48 +02:00

commit_range_spec.rb

Tag model specs

2015-12-09 10:50:51 +01:00

commit_spec.rb

Restrict access to references for confidential issues

2016-03-17 20:55:59 -03:00

commit_status_spec.rb

Annotate models

2016-01-06 13:09:55 +00:00

deploy_key_spec.rb

Tag model specs

2015-12-09 10:50:51 +01:00

deploy_keys_project_spec.rb

Tag model specs

2015-12-09 10:50:51 +01:00

email_spec.rb

Validate email addresses using Devise.email_regexp

2016-02-09 18:15:35 +01:00

event_spec.rb

Rename Event#proper? to Event#visible_to_user?

2016-03-24 14:24:22 -03:00

external_issue_spec.rb

Hide number sign for string prefixed external issues

2016-04-12 10:01:52 +02:00

forked_project_link_spec.rb

Fix Style/TrailingBlankLines cop violations

2015-06-22 14:38:33 -04:00

generic_commit_status_spec.rb

Annotate models

2016-01-06 13:09:55 +00:00

global_milestone_spec.rb

Fix Error 500 when global milestones have slashes

2015-12-22 13:15:32 -08:00

group_spec.rb

Address feedback

2016-03-22 00:09:20 +01:00

identity_spec.rb

Codestyle changes

2016-01-12 12:29:10 -02:00

issue_spec.rb

A new branch created for a confidential issue is named <id>-confidential-issue.

2016-04-19 09:22:55 +05:30

jira_issue_spec.rb

Backport JIRA service

2015-12-18 14:19:48 -06:00

key_spec.rb

Fixed Rubocop offenses

2015-12-15 00:53:52 -02:00

label_link_spec.rb

Tag model specs

2015-12-09 10:50:51 +01:00

label_spec.rb

Add cross project references support for label model

2016-03-03 10:41:11 +01:00

member_spec.rb

Validate email addresses using Devise.email_regexp

2016-02-09 18:15:35 +01:00

merge_request_spec.rb

Ensuring Merge Request API returns boolean values for work_in_progress

2016-03-28 22:11:44 -05:00

milestone_spec.rb

Restrict access for confidential issues on milestone view

2016-03-17 20:55:59 -03:00

namespace_spec.rb

Corrected spec title for Namespace.search

2016-03-11 15:25:24 -05:00

note_spec.rb

Merge branch 'rs-note-active-spec' into 'master'

2016-03-14 12:53:15 -04:00

notification_setting_spec.rb

Add spec for user_id uniq in NotificationSetting model

2016-03-30 10:44:20 +02:00

project_group_link_spec.rb

Bring ProjectGroupLink model and migrations from EE

2016-03-11 17:47:05 +01:00

project_security_spec.rb

Fix some specs

2016-03-20 22:55:08 +01:00

project_snippet_spec.rb

Remove Snippet#expires_at

2016-03-05 18:12:17 -05:00

project_spec.rb

Merge branch 'fix-cache-invalidations' into 'master'

2016-04-25 21:54:09 +02:00

project_team_spec.rb

Bring shared project feature tests from EE

2016-03-12 14:45:14 +01:00

project_wiki_spec.rb

Merge branch 'wiki-fix-reloaded' into 'master'

2016-05-19 13:07:06 -05:00

protected_branch_spec.rb

Tag model specs

2015-12-09 10:50:51 +01:00

release_spec.rb

Annotate models

2015-11-13 19:22:46 +01:00

repository_spec.rb

Merge branch '15470-fix-unknown-license-not-shown' into 'master'

2016-04-25 21:53:19 +02:00

service_spec.rb

Annotate models

2016-01-06 13:09:55 +00:00

snippet_spec.rb

Merge branch 'fix-18997' into 'master'

2016-06-27 17:14:22 -04:00

spam_log_spec.rb

Refactor Admin::SpamLogsController to block user before destroying

2016-02-02 11:25:44 -02:00

todo_spec.rb

Refactor Todo#target

2016-03-18 13:27:27 -03:00

tree_spec.rb

Prioritize previewable over plain README files

2016-01-25 11:27:07 -02:00

user_spec.rb

Allow temp-oauth-email as notification email

2016-03-31 19:59:19 +02:00

wiki_page_spec.rb

Fix old version warning when viewing wiki latest version via version_id

2016-01-29 14:17:00 -02:00