Douwe Maan 60942bf581 Merge branch 'rs-issue-15126' into 'master' ...

Remove persistent XSS vulnerability in `commit_person_link` helper

Because we were incorrectly supplying the tooltip title as
`data-original-title` (which Bootstrap's Tooltip JS automatically
applies based on the `title` attribute; we should never be setting it
directly), the value was being passed through as-is.

Instead, we should be supplying the normal `title` attribute and letting
Rails escape the value, which also negates the need for us to call
`sanitize` on it.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15126

See merge request !1948

2016-04-19 15:16:00 +00:00

..

appearances_helper.rb

Branded login page also in CE

2016-02-26 15:50:51 +01:00

application_helper.rb

Convert time param to Time

2016-04-07 00:00:58 -05:00

application_settings_helper.rb

Add configurable shared runners text

2016-04-18 09:54:52 -04:00

auth_helper.rb

Move "I should see Crowd login form" feature to a view spec

2016-02-24 17:38:13 -05:00

blob_helper.rb

Diff design updates

2016-04-07 15:33:18 -07:00

branches_helper.rb

Default target branch to patch-n when editing file in protected branch

2015-12-08 16:42:10 +01:00

broadcast_messages_helper.rb

Allow limited Markdown in Broadcast Messages

2016-02-06 14:30:07 -05:00

button_helper.rb

change the css class has_tooltip to has-tooltip universally

2016-03-20 21:37:22 +01:00

ci_badge_helper.rb

Update badge

2015-12-11 18:02:09 +01:00

ci_status_helper.rb

Use klass instead of clazz

2016-03-15 16:24:51 +01:00

commits_helper.rb

Remove persistent XSS vulnerability in commit_person_link helper

2016-04-17 18:42:49 -04:00

compare_helper.rb

Move helpers back to original directory

2015-09-09 14:37:34 +02:00

dashboard_helper.rb

Move helpers back to original directory

2015-09-09 14:37:34 +02:00

diff_helper.rb

Syntax & style updates

2016-04-14 12:33:29 -05:00

dropdowns_helper.rb

Add multi select stay open functionality

2016-03-25 08:10:25 -04:00

emails_helper.rb

If action link is not found, return nil.

2015-11-25 13:53:02 +01:00

events_helper.rb

Fix event rendering when create project

2016-04-04 18:59:04 +02:00

explore_helper.rb

Make projects sort dropdown shared so it can be reused for other pages

2016-03-04 19:26:10 +01:00

external_wiki_helper.rb

Fixed Rubocop offenses

2015-12-15 00:53:52 -02:00

form_helper.rb

Standardize the way we check for and display form errors

2016-04-04 21:37:07 -04:00

git_helper.rb

Move helpers back to original directory

2015-09-09 14:37:34 +02:00

gitlab_markdown_helper.rb

Remove random_markdown_tip helper

2016-04-09 20:43:59 -04:00

gitlab_routing_helper.rb

Ensure "Remove Source Branch" button is not shown when branch is being deleted. #3583

2015-12-04 10:43:33 -05:00

graph_helper.rb

Migrate CI::Project to Project

2015-12-11 18:02:09 +01:00

groups_helper.rb

Tweaks, refactoring, and specs

2016-03-20 21:04:07 +01:00

icons_helper.rb

audit log UI update

2016-03-02 17:06:01 +00:00

issuables_helper.rb

Fixed tests

2016-04-16 16:13:16 -04:00

issues_helper.rb

Merge branch 'issue_1752' into 'master'

2016-04-11 23:26:45 +00:00

labels_helper.rb

Fix an issue causing the Dashboard/Milestones page to be blank

2016-03-23 12:02:15 +01:00

merge_requests_helper.rb

Refactor revert_commit_link helper.

2016-02-19 13:14:54 -05:00

milestones_helper.rb

Fix an issue causing the Dashboard/Milestones page to be blank

2016-03-23 12:02:15 +01:00

namespaces_helper.rb

hide help block when user is creating a new project inside a group

2016-04-12 14:41:34 +01:00

nav_helper.rb

Add missing class to builds page

2016-02-18 16:16:32 -05:00

notes_helper.rb

Fix lint errors

2016-04-07 15:33:18 -07:00

notifications_helper.rb

Refactor notification helper and fix notification service

2016-03-30 10:44:20 +02:00

page_layout_helper.rb

Don't override issue page description in project layout.

2016-01-06 13:02:51 +01:00

preferences_helper.rb

Implementing 'Groups View' and 'TODOs View' as options for dashboard preferences.

2016-03-24 19:59:54 +01:00

projects_helper.rb

Remove additional misuse of data-original-title attribute

2016-04-18 11:40:24 -04:00

runners_helper.rb

Migrate CI::Project to Project

2015-12-11 18:02:09 +01:00

search_helper.rb

Use strings instead of constants

2016-03-24 15:19:43 -05:00

selects_helper.rb

Merge branch 'master' into assign-to-issuable-opener

2016-04-15 14:38:15 +02:00

snippets_helper.rb

Remove Snippet#expires_at

2016-03-05 18:12:17 -05:00

sorting_helper.rb

Show active sorting method for projects list

2016-03-04 19:27:02 +01:00

submodule_helper.rb

Move helpers back to original directory

2015-09-09 14:37:34 +02:00

tab_helper.rb

Restyle dashboard snippets visibility level tabs.

2015-10-21 11:10:09 +02:00

tags_helper.rb

Move helpers back to original directory

2015-09-09 14:37:34 +02:00

time_helper.rb

Refactor CI helpers

2015-09-29 16:26:40 +02:00

todos_helper.rb

Fix todo_target_path for todos where target was removed

2016-04-12 18:06:52 -03:00

tree_helper.rb

Some updates after last code review.

2016-02-19 13:14:52 -05:00

triggers_helper.rb

Reimplement Trigger API

2015-12-11 18:02:09 +01:00

version_check_helper.rb

Move the version_check_enabled check from view to helper

2015-09-23 16:28:51 -04:00

visibility_level_helper.rb

Address feedback

2016-03-22 00:09:20 +01:00