Robert SpeicherandRobert Speicher 55bbc7e3df Merge branch 'fix-impersonation-issue' into 'master' ...

Prevent privilege escalation via "impersonate" feature

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15548

See merge request !1956

2016-04-25 16:52:11 -04:00

..

admin

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 16:52:11 -04:00

ci

Merge branch 'fix/nomethod-error-on-ci' into 'master'

2016-03-29 12:35:06 +02:00

concerns

Merge branch 'fix/14505' into 'master'

2016-03-23 12:48:08 +01:00

dashboard

Merge branch 'fix/14505' into 'master'

2016-03-23 12:48:08 +01:00

explore

Merge branch 'issue_12658' into 'master'

2016-03-21 21:37:57 -04:00

groups

Merge branch 'fix/14505' into 'master'

2016-03-23 12:48:08 +01:00

import

Redirect to a default path if HTTP_REFERER is not set

2015-10-20 07:45:48 -07:00

oauth

Merge branch 'connorshea/gitlab-ce-revoke-authorized-application' into 'master'

2016-04-15 18:07:02 +02:00

profiles

Don't abuse the flash store for displaying SSH Key form errors

2016-03-03 16:13:59 -05:00

projects

Merge branch 'fix/link-group-permissions' into 'master'

2016-04-19 16:09:48 +02:00

sherlock

Added Sherlock, a custom profiling tool for GitLab

2015-11-09 14:29:10 +01:00

abuse_reports_controller.rb

Autofill abuse message text with user url. Closes #2838

2016-01-16 10:47:12 -05:00

application_controller.rb

Merge branch 'connorshea/gitlab-ce-revoke-authorized-application' into 'master'

2016-04-15 18:07:02 +02:00

autocomplete_controller.rb

Create EmojisController

2016-02-22 20:16:00 -06:00

confirmations_controller.rb

Add invites controller.

2015-04-14 12:07:33 +02:00

dashboard_controller.rb

Merge branch 'fix/14505' into 'master'

2016-03-23 12:48:08 +01:00

emojis_controller.rb

Update award_emoji test

2016-02-23 19:37:15 -06:00

groups_controller.rb

Merge branch 'issue_12658' into 'master'

2016-03-21 21:37:57 -04:00

help_controller.rb

Simplify help path prefixing

2015-09-23 00:24:17 -04:00

invites_controller.rb

Redirect to a default path if HTTP_REFERER is not set

2015-10-20 07:45:48 -07:00

namespaces_controller.rb

Merge branch 'issue_12658' into 'master'

2016-03-21 21:37:57 -04:00

omniauth_callbacks_controller.rb

Decouple SAML authentication from the default Omniauth logic

2016-02-18 17:01:07 -05:00

passwords_controller.rb

Allow the initial admin to set a password

2016-03-04 17:37:57 -05:00

profiles_controller.rb

Merge branch 'revert-avatar-cropping' into 'master'

2016-03-15 15:53:42 +00:00

projects_controller.rb

Merge branch 'issue_12658' into 'master'

2016-03-21 21:37:57 -04:00

registrations_controller.rb

Partially revert "Add IP check against DNSBLs at account sign-up"

2016-01-28 16:28:19 -05:00

root_controller.rb

Add user preference to view project activity and starred project activity as default dashboard

2015-09-26 08:46:05 -07:00

search_controller.rb

Enable search for logged-out users

2016-03-01 15:57:28 +01:00

sent_notifications_controller.rb

#can_unsubscribe? -> #?unsubscribable?

2016-01-11 14:23:45 +01:00

sessions_controller.rb

Merge branch 'fix/2fa-authentication-spoofing' into 'master'

2016-04-07 15:58:42 +02:00

snippets_controller.rb

Fix raw private snippets access workflow

2015-11-25 18:16:27 -02:00

uploads_controller.rb

Branded login page also in CE

2016-02-26 15:50:51 +01:00

users_controller.rb

Merge branch 'issue_12658' into 'master'

2016-03-21 21:37:57 -04:00