Dmitriy Zaporozhets bf7932bd06 Merge branch 'dir-traversal' into 'master' ...

Fix directory traversal vulnerabilities

Fixes gitlab/gitlab-ee#272.

As @joern mentions:

> This is not exploitable via the front-end nginx. But nevertheless this issue should be addressed.

See merge request !1760

2015-04-14 13:07:27 +00:00

..

assets

Merge pull request #9076 from dsander/event-title-width

2015-04-10 21:29:52 +03:00

controllers

Merge branch 'dir-traversal' into 'master'

2015-04-14 13:07:27 +00:00

finders

Fix tests and unassigned filter for issues. Updated CHANGELOG

2015-03-27 00:27:51 -07:00

helpers

Merge branch 'master' of gitlab.com:gitlab-org/gitlab-ce

2015-04-14 11:55:10 +03:00

mailers

Merge branch 'reference-access-control' into 'master'

2015-04-13 14:10:25 +00:00

models

Allow user to choose which email to be public

2015-04-14 19:42:48 +08:00

services

Merge branch 'reference-access-control' into 'master'

2015-04-13 14:10:25 +00:00

uploaders

Fix URL to uploaded file.

2015-02-20 16:01:37 +01:00

views

Allow user to choose which email to be public

2015-04-14 19:42:48 +08:00

workers

Merge branch 'regex-start-of-string' into 'master'

2015-04-12 07:36:40 +00:00