Robert SpeicherandRémy Coutable fb7b82654d Merge branch '15437-fix-xss-in-issue-tracker-service' into 'master' ...

Prevent XSS via custom issue tracker URL

Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/15437

See merge request !1955

Signed-off-by: Rémy Coutable <remy@rymai.me>

2016-04-26 10:06:43 +02:00

..

ci

Fix review comments

2016-03-14 13:33:26 +01:00

concerns

Merge branch 'fix-todos' into 'master'

2016-03-31 18:49:08 +02:00

hooks

Raise hook url limit

2016-01-15 00:35:12 +03:00

members

Use consistent markup and styling for highlighting across blobs, diffs, blame and snippets

2016-01-21 14:23:53 +01:00

network

Merge pull request #7999 from cirosantilli/append-inplace

2015-01-21 23:07:15 -08:00

project_services

Merge branch '15437-fix-xss-in-issue-tracker-service' into 'master'

2016-04-26 10:06:43 +02:00

.gitkeep

init commit

2011-10-09 00:36:38 +03:00

ability.rb

Merge branch 'fix-14607' into 'master'

2016-03-29 12:31:22 +02:00

abuse_report.rb

Clearify who deletes the user

2016-03-15 21:09:25 +01:00

appearance.rb

Branded login page also in CE

2016-02-26 15:50:51 +01:00

application_setting.rb

Merge branch 'issue_12658' into 'master'

2016-03-21 21:37:57 -04:00

audit_event.rb

Re-annotate models

2015-08-03 01:52:54 +09:00

blob.rb

Refactor caching code

2016-03-07 14:27:53 +01:00

broadcast_message.rb

Change ttl to 1 minute

2016-01-29 13:39:33 -05:00

commit_range.rb

Increase the minimum length for commit SHA matching to 7

2016-01-29 19:52:29 -05:00

commit_status.rb

adjusted behavior so canceled builds tagged as allowed to fail do not fail build

2016-03-17 07:55:10 -07:00

commit.rb

Use Gitlab::Git::DiffCollections

2016-03-03 18:38:44 +01:00

deploy_key.rb

Re-annotate models

2015-05-03 13:38:27 -07:00

deploy_keys_project.rb

Clean up code.

2015-04-03 12:28:47 +02:00

email.rb

Re-add EmailValidator to avoid the repetition of format: { with: Devise.email_regexp }

2016-02-09 18:15:35 +01:00

event.rb

Merge branch 'fix-comments-on-confidential-issues-show-activity-feed-for-non-members' into 'master'

2016-03-29 12:18:51 +02:00

external_issue.rb

Update ExternalIssue regex for JIRA integration

2016-01-26 15:55:40 -05:00

forked_project_link.rb

Use strong params for 5 more models

2014-06-26 15:00:09 +03:00

generic_commit_status.rb

Annotate models

2016-01-06 13:09:55 +00:00

global_label.rb

Updates from last code review.

2016-03-06 23:07:19 -05:00

global_milestone.rb

Merge branch 'added-milestone-upcoming' into 'master'

2016-03-30 09:26:54 +02:00

group.rb

Merge branch 'issue_12658' into 'master'

2016-03-21 21:37:57 -04:00

identity.rb

Codestyle changes

2016-01-12 12:29:10 -02:00

issue.rb

Merge branch 'move-issue-section-should-not-be-displayed-in-the-new-issue-form-14489' into 'master'

2016-03-23 12:29:41 +01:00

jira_issue.rb

Backport JIRA service

2015-12-18 14:19:48 -06:00

key.rb

Ensure "new SSH key" email do not ends up as dead Sidekiq jobs

2016-03-15 11:23:57 +01:00

label_link.rb

Annotate models

2014-08-25 12:25:02 +03:00

label.rb

Merge branch 'notifications-for-subscribers-confidential-issue-labels' into 'master'

2016-03-23 12:26:56 +01:00

lfs_object.rb

Update annotations

2015-12-08 21:00:01 -08:00

lfs_objects_project.rb

Update annotations

2015-12-08 21:00:01 -08:00

member.rb

Re-add EmailValidator to avoid the repetition of format: { with: Devise.email_regexp }

2016-02-09 18:15:35 +01:00

merge_request_diff.rb

Show at most 100 commits in the web UI

2016-03-04 15:17:12 +01:00

merge_request.rb

Merge branch 'fix_wip_in_mr_api' into 'master'

2016-04-01 16:07:22 +02:00

milestone.rb

Merge branch 'fix-milestone-upcoming' into 'master'

2016-03-29 12:18:10 +02:00

namespace.rb

Make Namespace.search case-insensitive

2016-03-11 15:25:24 -05:00

note.rb

Merge branch 'snippets-with-comments-cause-a-500-when-they-show-up-in-search-results-14764' into 'master'

2016-04-01 10:52:31 +02:00

notification.rb

Added Global to the drop downs and updated the label of the button to show the current level instead of Notifications

2015-09-16 19:46:24 -05:00

oauth_access_token.rb

Merge branch 'connorshea/gitlab-ce-revoke-authorized-application' into 'master'

2016-04-15 18:07:02 +02:00

personal_snippet.rb

Remove Snippet#expires_at

2016-03-05 18:12:17 -05:00

project_group_link.rb

Bring ProjectGroupLink model and migrations from EE

2016-03-11 17:47:05 +01:00

project_import_data.rb

Re-annotate models

2015-05-03 13:38:27 -07:00

project_snippet.rb

Remove Snippet#expires_at

2016-03-05 18:12:17 -05:00

project_team.rb

Allow users to access project shared with their group

2016-03-11 18:46:01 +01:00

project_wiki.rb

Merge branch 'issues-show-performance' into 'master'

2016-03-21 16:40:54 +01:00

project.rb

Merge branch 'fix/safe-import-url' into 'master'

2016-03-22 12:34:38 +01:00

protected_branch.rb

Use project.commit convenience method.

2015-04-24 12:29:36 +02:00

release.rb

Annotate models

2015-11-13 19:22:46 +01:00

repository.rb

Merge branch 'reorder-project-expire-cache' into 'master'

2016-04-15 18:05:56 +02:00

security_event.rb

Re-annotate models

2015-08-03 01:52:54 +09:00

sent_notification.rb

#can_unsubscribe? -> #?unsubscribable?

2016-01-11 14:23:45 +01:00

service.rb

Greatly improve external_issue_tracker performance

2016-01-19 14:03:20 +01:00

snippet.rb

Removed arel_table receiver from search methods

2016-03-11 15:25:23 -05:00

spam_log.rb

Refactor Admin::SpamLogsController to block user before destroying

2016-02-02 11:25:44 -02:00

spam_report.rb

Support Akismet spam checking for creation of issues via API

2016-02-02 11:25:44 -02:00

subscription.rb

Improving the original label-subscribing implementation

2016-03-15 18:22:02 +01:00

todo.rb

Merge branch 'trigger-todo-for-mentions-on-commits-page' into 'master'

2016-03-18 21:23:11 +01:00

tree.rb

Merge branch 'master' of https://gitlab.com/gitlab-org/gitlab-ce into lazy-blobs

2016-02-01 13:51:05 +01:00

user.rb

Merge branch 'error-when-ldap-doesn-t-supply-an-email-address-14559' into 'master'

2016-04-01 16:14:38 +02:00

users_star_project.rb

Touch project when toggling stars to update cache

2015-12-03 16:08:08 -02:00

wiki_page.rb

Support Wiki with UTF-8 page name

2016-03-16 02:17:07 +09:00