418c3b2900
Add latest changes from gitlab-org/gitlab@master
2020-09-30 09:10:11 +00:00
4584816f15
Add latest changes from gitlab-org/gitlab@master
2020-06-22 00:08:57 +00:00
2fd92f2dc7
Add latest changes from gitlab-org/gitlab@master
2020-03-04 21:07:54 +00:00
80f61b4035
Add latest changes from gitlab-org/gitlab@master
2019-09-18 14:02:45 +00:00
537eb0bb2d
Avoid checking dns rebind protection in validation
2019-09-05 09:11:14 +00:00
e5e1c907c0
Add outbound requests setting for system hooks
...
This MR adds new application setting to network section
`allow_local_requests_from_system_hooks`. Prior to this change
system hooks were allowed to do local network requests by default
and we are adding an ability for admins to control it.
2019-08-02 15:39:18 +01:00
d119d3d1b2
Align UrlValidator to validate_url gem implementation.
...
Renamed UrlValidator to AddressableUrlValidator to avoid 'url:' naming collision with ActiveModel::Validations::UrlValidator in 'validates' statement.
Make use of the options attribute of the parent class ActiveModel::EachValidator.
Add more options: allow_nil, allow_blank, message.
Renamed 'protocols' option to 'schemes' to match the option naming from UrlValidator.
2019-04-11 06:29:07 +00:00
840f80d48b
Add validation to webhook and service URLs to ensure they are not blocked because of SSRF
2018-06-01 11:43:53 +00:00
b7d8df503c
Enable Style/MutableConstant
2017-02-23 09:31:56 -06:00
54a50bf81d
refactor url validator to use sanitizer for check
2016-07-01 09:02:45 +02:00
ef5713546b
few more changes from suggestions
2016-06-30 17:22:56 +02:00
5b893d603d
few changes based on feedback
2016-06-30 13:17:37 +02:00
8076d38a14
added more info on how addressable URI differs from what we use in UrlValidator
2016-06-24 11:35:32 +02:00
58c49966fa
updated validator based on feedback
2016-06-23 17:18:02 +02:00
4273e07e00
fix comment
2016-06-20 17:25:51 +02:00
6d763831d0
fixed a few MySQL issues and added changelog
2016-06-20 17:20:53 +02:00
896e09d055
started working on a migration for projects that have current import_url issues
2016-06-20 15:31:03 +02:00
a5abec905f
fix addressable url validator
2016-06-20 11:34:34 +02:00
0e222f02d8
fixing URL validation for import_url on projects
2016-06-17 15:09:39 +02:00
GitLab Bot