Jörg Thalheim 9f089ac48c use constant-time string compare for internal api authentication ...

Ruby str_equal uses memcmp internally to compare String.
Memcmp is vunerable to timing attacks because it returns early
on mismatch (on most x32 platforms memcmp uses a bytewise comparision).
Devise.secure_compare implements a constant time comparision instead.

2015-03-06 20:06:26 +01:00

..

api

use constant-time string compare for internal api authentication

2015-03-06 20:06:26 +01:00

assets

move assets from lib directory to vendor

2012-05-29 17:56:48 +05:00

backup

Revert "Fix broken access control and refactor avatar upload"

2015-02-19 08:57:35 -08:00

gitlab

Added comment notification events to HipChat and Slack services.

2015-03-06 06:54:00 -08:00

redcarpet/render

Replace highlight.js with rouge-fork rugments

2015-01-15 13:41:11 +01:00

support

Revert "Merge branch 'go-get-workaround-nginx' of https://github.com/mattes/gitlabhq into mattes-go-get-workaround-nginx"

2015-03-03 11:21:48 +01:00

tasks

Add brakeman and jasmine

2015-03-02 18:22:37 -08:00

disable_email_interceptor.rb

Add email interceptor to prevent mail sending if email sending is disabled.

2014-10-27 13:05:50 +01:00

email_validator.rb

More rubocop rules enable

2015-02-02 21:31:03 -08:00

event_filter.rb

Add parenthesis to function def with arguments.

2014-10-03 09:18:46 +02:00

extracts_path.rb

Upgrade to Rails 4.1.9

2015-02-14 11:09:23 -07:00

file_size_validator.rb

Fully embrace Ruby 1.9 hash syntax

2012-08-10 18:25:15 -04:00

gt_one_coercion.rb

diff unfold

2014-08-14 15:48:14 +04:00

repository_cache.rb

Fix RepositoryCache backend attr_reader

2015-01-30 10:17:55 -05:00

static_model.rb

Fixed styles, ProjectHook specs etc

2013-01-05 00:35:38 +02:00

unfold_form.rb

diff unfold

2014-08-14 15:48:14 +04:00