Robert SpeicherandRobert Speicher bbc92fff21 Merge branch 'rs-notes-privilege-escalation' into 'master' ...

Prevent privilege escalation via notes API

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15577

See merge request !1964

2016-04-26 16:30:16 -04:00

..

benchmarks

Move Markdown/reference logic from Gitlab::Markdown to Banzai

2015-12-15 15:51:16 +01:00

controllers

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 16:56:33 -04:00

factories

Merge branch 'fix/commit-status-artifacts' into 'master'

2016-01-27 17:47:06 -05:00

features

Merge branch '15591-fix-project-leak-in-new-mr-view' into 'master'

2016-04-25 17:14:22 -04:00

finders

remove public field from namespace and refactoring

2016-01-04 16:00:29 +02:00

fixtures

Merge branch 'issue_3945' into 'master'

2016-01-20 16:56:13 -05:00

helpers

Merge branch '15437-fix-xss-in-issue-tracker-service' into 'master'

2016-04-26 10:40:20 +02:00

initializers

Merge branch 'fix-gravator-default-url' into 'master'

2016-01-18 12:38:42 -05:00

javascripts

Merge branch 'rs-relax-autosize' into 'master'

2016-02-02 10:49:33 -05:00

lib

Merge branch 'dev_issue_15331' into 'master'

2016-04-25 15:51:16 -04:00

mailers

Merge branch 'add_email_headers' into 'master'

2016-01-19 16:25:21 -05:00

models

Merge branch '15437-fix-xss-in-issue-tracker-service' into 'master'

2016-04-26 10:40:20 +02:00

requests

Merge branch 'rs-notes-privilege-escalation' into 'master'

2016-04-26 16:30:16 -04:00

routing

Merge branch 'issue_3076' into 'master'

2016-01-08 15:52:05 +00:00

services

Merge branch 'fix/private-labels-permissions' into 'master'

2016-04-26 11:45:20 +02:00

support

Merge branch '15437-fix-xss-in-issue-tracker-service' into 'master'

2016-04-26 10:40:20 +02:00

tasks/gitlab

Add lfs to backup specs.

2015-11-19 10:43:45 +01:00

views/help

Allow non-admin users to see version information

2015-09-23 17:18:15 -04:00

workers

Write to InfluxDB directly via UDP

2015-12-29 14:53:45 +01:00

factories_spec.rb

Remove the invalid key factories

2015-04-11 17:12:10 -04:00

factories.rb

Merge branch 'fix-private-snippet-api' into 'master'

2016-04-25 16:45:59 -04:00

rails_helper.rb

Started on the actual rspec 3 upgrade

2015-06-22 12:12:49 +02:00

spec_helper.rb

Merge branch 'rs-rails-security' into 'master'

2016-01-25 15:26:24 -08:00

teaspoon_env.rb

teaspoon install

2015-05-28 18:22:32 -04:00