Robert SpeicherandRobert Speicher 0f295530fe Merge branch 'rs-notes-privilege-escalation' into 'master' ...

Prevent privilege escalation via notes API

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15577

See merge request !1964

2016-04-26 16:20:54 -04:00

..

ci

Merge branch 'fix/ci-first-job-allow-failure' into 'master'

2016-02-18 16:18:45 +01:00

commits

Merge branch 'issue_3409' into 'master'

2016-02-19 19:55:19 +01:00

files

Automatically fork a project when not allowed to edit a file.

2015-12-18 10:03:34 +01:00

issues

Merge branch 'tasks' into 'master'

2016-02-22 08:47:44 +01:00

merge_requests

Merge branch '15591-fix-project-leak-in-new-mr-view' into 'master'

2016-04-25 17:14:07 -04:00

milestones

Move global milestone specs

2015-11-16 14:38:34 +01:00

notes

Merge branch 'rs-notes-privilege-escalation' into 'master'

2016-04-26 16:20:54 -04:00

oauth2

Rubocop: no trailing newlines

2015-02-02 21:53:27 -08:00

projects

Flush all repository caches when deleting a repo

2016-02-17 11:38:18 +01:00

search

An in_namespace scope is already present

2015-06-09 13:42:01 +02:00

archive_repository_service.rb

Clear archive cache asynchronously

2015-10-20 16:53:37 +02:00

audit_event_service.rb

Audit log for user authentication

2015-07-06 12:36:08 +03:00

base_service.rb

Merge branch 'tasks' into 'master'

2016-02-22 08:47:44 +01:00

compare_service.rb

Add ignore white space option in merge request diff

2015-11-13 16:53:53 +09:00

create_branch_service.rb

Fix duplicated branch creation/deletion Web hooks/service notifications when using Web UI

2016-02-09 06:22:49 -08:00

create_commit_builds_service.rb

Don't create CI status for refs that doesn't have .gitlab-ci.yml, even if the builds are enabled

2015-12-17 16:33:47 +01:00

create_release_service.rb

Allow editing a release in API via PUT method

2015-11-21 22:34:53 +01:00

create_snippet_service.rb

Enforce restricted visibilities for snippets

2015-03-08 17:57:08 -06:00

create_spam_log_service.rb

Support Akismet spam checking for creation of issues via API

2016-02-02 11:25:44 -02:00

create_tag_service.rb

Generate builds when creating tag using web interface

2016-01-11 12:37:27 +01:00

delete_branch_service.rb

Fix duplicated branch creation/deletion Web hooks/service notifications when using Web UI

2016-02-09 06:22:49 -08:00

delete_tag_service.rb

Refactor release code a bit

2015-11-09 15:30:50 +01:00

delete_user_service.rb

First pass at deleting projects in the background.

2016-01-29 09:14:16 -05:00

destroy_group_service.rb

First pass at deleting projects in the background.

2016-01-29 09:14:16 -05:00

event_create_service.rb

Create a "destroyed Milestone" event and keep Milestone events around in the DB

2015-09-15 05:51:11 -07:00

git_hooks_service.rb

Raise the exception from #execute instead of #run_hook. #1156 #3069

2015-12-03 09:39:15 -05:00

git_push_service.rb

Merge branch 'fix/gitpushservice-complexity-issue' into 'master'

2016-02-18 17:11:47 +01:00

git_tag_push_service.rb

Remove ci_ prefix from all ci related things

2015-12-11 18:02:09 +01:00

gravatar_service.rb

Add support for HiDPI displays in gravatar service

2015-09-26 20:53:16 +02:00

issuable_base_service.rb

Merge branch 'fix/private-labels-permissions' into 'master'

2016-04-25 16:18:16 -04:00

notification_service.rb

This will ensure previous assignee gets an email even if his notif level is "on mention"

2016-01-15 17:57:45 +01:00

repair_ldap_blocked_user_service.rb

Code style fixes and some code simplified

2016-01-08 16:26:04 -02:00

system_hooks_service.rb

Merge branch 'add_username_to_user_system_hooks' of https://github.com/tbeadle/gitlabhq

2016-01-13 10:12:30 +01:00

system_note_service.rb

updated system note service and spec based on feedback

2016-02-16 09:01:56 +01:00

test_hook_service.rb

Added X-GitLab-Event header for web hooks

2015-05-08 16:49:03 +03:00

todo_service.rb

Merge branch 'fix-todos' into 'master'

2016-02-26 16:47:54 +01:00

update_release_service.rb

Allow editing a release in API via PUT method

2015-11-21 22:34:53 +01:00

update_snippet_service.rb

Change dynamic abilities to new format

2015-06-26 17:18:40 +02:00