Robert SpeicherandRobert Speicher 15f8fb3164 Merge branch 'fix-impersonation-issue' into 'master' ...

Prevent privilege escalation via "impersonate" feature

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15548

See merge request !1956

2016-04-25 17:03:43 -04:00

..

admin

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 17:03:43 -04:00

ci

Merge branch 'ci-yaml-validation' into 'master'

2015-11-19 18:27:46 -05:00

concerns

Merge branch 'dirceu/gitlab-ce-new-merge-request-from-file-edit' into 'master'

2015-11-19 11:46:24 -05:00

dashboard

Refactor global and group milestones logic

2015-11-16 14:07:38 +01:00

explore

Clean up overlap between dashboard and explore.

2015-09-08 14:49:20 +01:00

groups

Merge branch 'fix-global-milestones-error-500' into 'master'

2015-12-07 14:28:31 -05:00

import

Redirect to a default path if HTTP_REFERER is not set

2015-10-20 07:45:48 -07:00

oauth

Move helpers back to original directory

2015-09-09 14:37:34 +02:00

profiles

Redirect to a default path if HTTP_REFERER is not set

2015-10-20 07:45:48 -07:00

projects

Merge branch 'rs-issue-4032' into 'master'

2015-12-15 12:16:17 -05:00

sherlock

Added Sherlock, a custom profiling tool for GitLab

2015-11-09 14:29:10 +01:00

abuse_reports_controller.rb

Only pass abuse report ID to AbuseReportMailer.

2015-10-18 11:58:45 +02:00

application_controller.rb

Only redirect to homepage url when its not the root url

2015-11-02 15:42:30 +01:00

autocomplete_controller.rb

Sorted autocomplete users list by name

2015-09-15 22:48:24 +01:00

confirmations_controller.rb

Add invites controller.

2015-04-14 12:07:33 +02:00

dashboard_controller.rb

Fix a bug when milestone/label filter was empty for dashboard issues page

2015-11-16 14:07:38 +01:00

groups_controller.rb

Allow groups to appear in the search results if the group owner allows it

2015-11-05 13:18:51 +02:00

help_controller.rb

Simplify help path prefixing

2015-09-23 00:24:17 -04:00

invites_controller.rb

Redirect to a default path if HTTP_REFERER is not set

2015-10-20 07:45:48 -07:00

namespaces_controller.rb

Allow access to group from root url

2015-09-14 11:16:54 +02:00

omniauth_callbacks_controller.rb

Fix rubocop warnings in app

2015-10-03 00:56:37 -05:00

passwords_controller.rb

Merge branch 'devise_paranoid_mode' into 'master'

2015-12-09 20:59:14 -05:00

profiles_controller.rb

Redirect to a default path if HTTP_REFERER is not set

2015-10-20 07:45:48 -07:00

projects_controller.rb

Merge branch 'stanhu/gitlab-ce-fix-404-after-project-removal'

2015-11-30 12:03:13 -05:00

registrations_controller.rb

Fix error when deleting a user who has projects

2015-06-23 04:39:49 -07:00

root_controller.rb

Add user preference to view project activity and starred project activity as default dashboard

2015-09-26 08:46:05 -07:00

search_controller.rb

Add support for searching commit log messages

2015-10-28 22:34:39 -04:00

sessions_controller.rb

Bump devise-two-factor to 2.0.0

2015-09-19 21:16:18 -04:00

snippets_controller.rb

Merge branch 'dbalexandre/gitlab-ce-fix-raw-personal-snippet-access-workflow'

2015-11-27 14:43:42 -05:00

uploads_controller.rb

Only render 404 page from /public

2015-10-13 20:12:34 +03:00

users_controller.rb

Merge branch 'atom-feed-latest-update' into 'master'

2015-11-20 11:02:27 +01:00