Douwe Maan 60942bf581 Merge branch 'rs-issue-15126' into 'master' ...

Remove persistent XSS vulnerability in `commit_person_link` helper

Because we were incorrectly supplying the tooltip title as
`data-original-title` (which Bootstrap's Tooltip JS automatically
applies based on the `title` attribute; we should never be setting it
directly), the value was being passed through as-is.

Instead, we should be supplying the normal `title` attribute and letting
Rails escape the value, which also negates the need for us to call
`sanitize` on it.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15126

See merge request !1948

2016-04-19 15:16:00 +00:00

..

abuse_report_mailer

Fix the abuse report detail URL in the HTML email template

2016-01-05 18:02:12 -05:00

abuse_reports

Standardize the way we check for and display form errors

2016-04-04 21:37:07 -04:00

admin

Merge branch 'configurable-shared-runners-text' into 'master'

2016-04-19 12:15:59 +00:00

ci

Redirect to root path when visiting /ci

2016-03-29 08:04:17 +02:00

dashboard

Merge branch 'fix-todos' into 'master'

2016-03-31 16:43:12 +00:00

devise

Don't retrieve default values from params

2016-04-13 13:03:11 +05:30

doorkeeper

Fix the improper delete form being rendered for an oauth_authorized_application

2016-04-14 07:24:57 -07:00

email_rejection_mailer

We'll get the <p> for free.

2015-08-19 12:38:08 -07:00

emojis

Updated UI of award emoji

2016-03-11 09:02:43 +00:00

errors

Add a page title to every page.

2015-04-30 19:12:15 +02:00

events

Remove "Congratulations!" tweet button on newly-created project.

2016-03-31 17:09:36 -06:00

explore

Make projects sort dropdown shared so it can be reused for other pages

2016-03-04 19:26:10 +01:00

groups

Fixed group milestones placeholder bug

2016-04-14 10:28:05 +01:00

help

Simplify random user generation.

2016-04-16 16:00:30 -04:00

import

Updated based on feedback

2016-04-14 09:32:02 +01:00

invites

Add a page title to every page.

2015-04-30 19:12:15 +02:00

kaminari/gitlab

Implement new UI for pagination

2016-01-20 21:27:01 -05:00

layouts

Remove group members check

2016-04-18 11:12:28 -03:00

notify

Add new notifications for issue move action

2016-03-17 07:39:16 +01:00

profiles

Merge branch 'master' into decouple-member-notification

2016-04-11 10:34:49 -03:00

projects

Merge branch 'configurable-shared-runners-text' into 'master'

2016-04-19 12:15:59 +00:00

repository_check_mailer

Improve 'auto fsck' admin emails

2016-04-18 10:58:40 +02:00

search

Refactor and expose only Gitlab::UrlBuilder.build(record)

2016-04-13 16:07:04 +02:00

shared

Merge branch 'rs-issue-15126' into 'master'

2016-04-19 15:16:00 +00:00

sherlock

Replaced "td" with "th" in the Sherlock SQL list

2016-01-18 12:03:17 +01:00

snippets

Refactor css for snippets list

2016-02-26 14:44:39 +01:00

users

Removed aside toggle on profile pages

2016-04-18 17:53:38 +01:00

votes

prevent users from being able to both upvote and downvote

2016-04-09 23:31:45 +01:00