home/gitlabhq
2
0
Fork 0
mirror of https://github.com/wahyd4/gitlabhq.git synced 2026-08-12 06:06:05 +10:00
Code Issues Packages Projects Releases Wiki Activity
Files
71212ecea6aee0365c336a596fbb3f593dfaf4ab
gitlabhq/spec/lib/gitlab
T
History
Douwe MaanandRobert Speicher ad421b3ac6 Merge branch '19312-confidential-issue' into 'master' 
Fix privilege escalation issue with OAuth external users

Related to https://gitlab.com/gitlab-org/gitlab-ce/issues/19312

This MR fixes a privilege escalation issue, where manually set external users would be reverted back to internal users if they logged in via OAuth and that provider was not in the `external_providers` list.

/cc @douwe

See merge request !1975
(cherry picked from commit 5e6342b7ac)
2016-06-30 14:40:58 -04:00
..
backend
Test Grack::Auth via a request spec
2016-03-23 14:09:52 +01:00
badge
Fix tests failures
2016-06-07 10:25:57 +02:00
bitbucket_import
Make Omniauth providers specs to not modify global configuration
2016-06-08 16:50:05 +02:00
ci
Make method that composes ci config entry private
2016-06-14 10:48:51 +02:00
database
Merge branch 'update-column-in-batches-where' into 'master'
2016-06-17 14:14:25 -04:00
diff
Show a notice for diffs that are too large
2016-03-18 12:30:46 +01:00
email
Syntax-highlight diffs in push emails
2016-05-17 13:23:17 +01:00
fogbugz_import
updated spec
2016-03-31 09:22:28 +02:00
gfm
Enable RSpec/NotToNot cop and auto-correct offenses
2016-05-24 15:40:29 -04:00
github_import
Merge branch 'gh-disable-webhooks'
2016-06-07 13:06:43 +02:00
gitlab_import
Make Omniauth providers specs to not modify global configuration
2016-06-08 16:50:05 +02:00
gitorious_import
Tag lib specs
2015-12-09 11:55:42 +01:00
google_code_import
refactored code based on feedback plus fixed a couple of other issues
2016-03-28 16:35:03 +02:00
import_export
Merge branch 'fix/import-export-gitlab-errors' into 'master'
2016-06-23 14:36:40 -04:00
ldap
Unblocks user when active_directory is disabled and it can be found
2016-04-05 16:34:31 -03:00
lfs
Merge branch 'ci-lfs-fetch' into 'master'
2016-06-21 11:50:51 -04:00
metrics
Merge branch 'performance-clock-adjustments' into 'master'
2016-06-28 16:46:07 -04:00
middleware
Rename metric to 'rails queue duration'
2016-05-26 17:53:21 +02:00
o_auth
Merge branch '19312-confidential-issue' into 'master'
2016-06-30 14:40:58 -04:00
saml
Merge branch 'fix_saml_signin' into 'master'
2016-06-23 14:28:43 -04:00
sanitizers
Improved SVG sanitizer specs to include smoke tests for clean.
2016-06-12 21:05:58 -04:00
sherlock
Enable RSpec/NotToNot cop and auto-correct offenses
2016-05-24 15:40:29 -04:00
sql
Tag lib specs
2015-12-09 11:55:42 +01:00
template
Merge branch '17521-gitlab-ci-yml-templates' into 'master'
2016-06-21 12:17:47 -04:00
akismet_helper_spec.rb
Update tests for the current_application_settings request store changes
2016-05-27 19:05:52 -07:00
asciidoc_spec.rb
Fix relative links in other markup formats
2016-02-12 17:20:59 +01:00
auth_spec.rb
Also rename "find" in the specs
2016-06-13 15:38:25 +02:00
award_emoji_spec.rb
Merge branch 'master' into awardables
2016-05-30 18:54:08 +02:00
blame_spec.rb
Move blame group logic to dedicated class
2016-01-28 14:49:21 +01:00
build_data_builder_spec.rb
Suppress e-mails on failed builds if allow_failure is set
2016-01-07 10:45:39 -08:00
closing_issue_extractor_spec.rb
Remove dumb debug statement and add many tests.
2016-04-07 08:47:29 -04:00
color_schemes_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
database_spec.rb
Improve Issuable.order_labels_priority
2016-06-06 11:59:49 -05:00
exclusive_lease_spec.rb
Improve test descriptions
2016-03-10 12:55:06 +01:00
git_access_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
git_access_wiki_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
highlight_spec.rb
Add missing specs
2016-01-19 16:26:44 +01:00
incoming_email_spec.rb
Improve and finish the fallback to the In-Reply-To and References header for the reply-by-email feature
2016-03-25 13:05:15 +01:00
key_fingerprint_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
lazy_spec.rb
Added Gitlab::Lazy
2016-05-26 13:58:01 +02:00
markup_helper_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
metrics_spec.rb
Fix setting of "action" for Grape transactions
2016-04-20 22:42:52 +02:00
note_data_builder_spec.rb
Improve note factory
2016-05-29 15:03:00 -04:00
popen_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
project_search_results_spec.rb
Project members with guest role can't access confidential issues
2016-06-13 19:32:00 -03:00
push_data_builder_spec.rb
Using single builder for push and tag events
2016-04-19 11:00:30 +02:00
reference_extractor_spec.rb
Merge branch 'remove_jiraissue' into 'master'
2016-06-16 20:35:14 -04:00
regex_spec.rb
Allow "@" in file names and path
2016-02-01 16:20:49 +01:00
search_results_spec.rb
Project members with guest role can't access confidential issues
2016-06-13 19:32:00 -03:00
snippet_search_results_spec.rb
Refactor Gitlab::SnippetSearchResults
2016-03-11 15:25:22 -05:00
themes_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
upgrader_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
uploads_transfer_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
url_builder_spec.rb
Revert "Merge branch 'wiki-fix' into 'master' "
2016-05-10 10:57:48 +02:00
url_sanitizer_spec.rb
Mask credentials from URL when import of project has failed.
2016-05-18 21:16:36 -05:00
version_info_spec.rb
Tag lib specs
2015-12-09 11:55:42 +01:00
workhorse_spec.rb
Add workhorse controller and API helpers
2016-06-06 13:16:30 +02:00