Robert SpeicherandRobert Speicher 0f295530fe Merge branch 'rs-notes-privilege-escalation' into 'master' ...

Prevent privilege escalation via notes API

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15577

See merge request !1964

2016-04-26 16:20:54 -04:00

..

benchmarks

Move Markdown/reference logic from Gitlab::Markdown to Banzai

2015-12-15 15:51:16 +01:00

controllers

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 16:55:12 -04:00

factories

Use sequence in label factory to get around uniqueness error

2016-04-26 17:31:19 +02:00

features

Merge branch '15591-fix-project-leak-in-new-mr-view' into 'master'

2016-04-25 17:14:07 -04:00

finders

remove public field from namespace and refactoring

2016-01-04 16:00:29 +02:00

fixtures

Render sanitized SVG images

2016-02-01 18:25:32 +01:00

helpers

Merge branch '15437-fix-xss-in-issue-tracker-service' into 'master'

2016-04-26 10:33:42 +02:00

initializers

Ensure Gravatar host looks like an actual host

2016-01-18 14:58:16 +01:00

javascripts

Project dropdown test span -> i

2016-02-05 20:08:28 +00:00

lib

Merge branch 'dev_issue_15331' into 'master'

2016-04-25 15:51:37 -04:00

mailers

Move profile notifications specs to separate file

2016-02-12 14:01:28 +01:00

models

Merge branch '15437-fix-xss-in-issue-tracker-service' into 'master'

2016-04-26 10:33:42 +02:00

requests

Merge branch 'rs-notes-privilege-escalation' into 'master'

2016-04-26 16:20:54 -04:00

routing

Increase the minimum length for commit SHA matching to 7

2016-01-29 19:52:29 -05:00

services

Fix dumb specs

2016-04-26 18:12:42 +02:00

support

Merge branch '15437-fix-xss-in-issue-tracker-service' into 'master'

2016-04-26 10:33:42 +02:00

tasks/gitlab

Add lfs to backup specs.

2015-11-19 10:43:45 +01:00

views

Merge branch 'rs-crowd-form-view-spec' into 'master'

2016-02-26 16:46:46 +01:00

workers

Expire caches after forking/importing a repository

2016-02-17 11:38:18 +01:00

factories_spec.rb

Remove the invalid key factories

2015-04-11 17:12:10 -04:00

factories.rb

Merge branch 'fix-private-snippet-api' into 'master'

2016-04-25 16:41:14 -04:00

rails_helper.rb

Started on the actual rspec 3 upgrade

2015-06-22 12:12:49 +02:00

spec_helper.rb

Add temporary monkey patch to get specs passing on 4.2.5.1

2016-01-25 14:53:28 -08:00

teaspoon_env.rb

teaspoon install

2015-05-28 18:22:32 -04:00