Robert SpeicherandRobert Speicher 017f87e8cd Merge branch 'fix-impersonation-issue' into 'master' ...

Prevent privilege escalation via "impersonate" feature

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15548

See merge request !1956

2016-04-25 16:55:12 -04:00

..

admin

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 16:55:12 -04:00

ci

Merge branch 'fix/deprecated-ci-badge-permissions' into 'master'

2016-03-02 12:08:21 +01:00

groups

Fix Error 500 when creating global milestones with Unicode characters

2015-12-05 00:04:44 -08:00

import

Fix duplicate repositories in GitHub import page

2015-10-19 10:39:59 -07:00

profiles

Bump devise-two-factor to 2.0.0

2015-09-19 21:16:18 -04:00

projects

Merge branch 'issue_13539' into 'master'

2016-02-18 13:00:45 +01:00

abuse_reports_controller_spec.rb

Add AbuseReport#notify

2016-01-04 18:59:42 -05:00

application_controller_spec.rb

Fix 403 Access Denied error messages when accessing Labels section in a project that has MRs disabled but issues enabled

2015-06-18 03:15:05 -07:00

autocomplete_controller_spec.rb

Reduce method complexity in AutocompleteController

2015-11-20 13:49:24 +01:00

blame_controller_spec.rb

Move blame group logic to dedicated class

2016-01-28 14:49:21 +01:00

blob_controller_spec.rb

Fix Style/AlignHash cop violations

2015-06-22 22:24:39 -07:00

branches_controller_spec.rb

Fix errors deleting and creating branches with encoded slashes

2015-08-01 23:33:33 -07:00

commit_controller_spec.rb

Merge branch 'issue_3409' into 'master'

2016-02-19 19:55:19 +01:00

commits_controller_spec.rb

Fix Style/AlignHash cop violations

2015-06-22 22:24:39 -07:00

groups_controller_spec.rb

Make the /groups route behave as expected

2016-01-23 16:10:13 -08:00

help_controller_spec.rb

Fix Style/AlignHash cop violations

2015-06-22 22:24:39 -07:00

invites_controller_spec.rb

Redirect to a default path if HTTP_REFERER is not set

2015-10-20 07:45:48 -07:00

namespaces_controller_spec.rb

Fix tests and improve wording

2015-09-14 14:16:08 +02:00

profile_keys_controller_spec.rb

Only publish ssh key-type and key

2015-08-04 14:33:18 +02:00

projects_controller_spec.rb

refactored migration and spec based on feedback

2016-02-04 13:20:55 +01:00

root_controller_spec.rb

Add user preference to view project activity and starred project activity as default dashboard

2015-09-26 08:46:05 -07:00

sent_notification_controller_spec.rb

Unsubscribe from thread through link in email footer

2016-01-09 12:41:22 +01:00

sessions_controller_spec.rb

Merge branch 'fix/2fa-authentication-spoofing' into 'master'

2016-04-07 17:33:47 +02:00

snippets_controller_spec.rb

Fix raw private snippets access workflow

2015-11-25 18:16:27 -02:00

uploads_controller_spec.rb

Make all group public

2015-09-09 11:27:03 +03:00

users_controller_spec.rb

Refactor UsersController to not kill the database

2015-11-18 13:05:45 +01:00