Takuya Noguchi
|
2b6307f6ad
|
Enable RuboCop Style/RegexpLiteral
|
2018-02-01 02:06:07 +09:00 |
|
James Lopez
|
532a0b6018
|
Merge branch 'fix/import-rce-10-3' into 'security-10-3'
[10.3] Fix RCE via project import mechanism
See merge request gitlab/gitlabhq!2294
(cherry picked from commit dcfec507d6f9ee119d65a832393e7c593af1d3b2)
86d75812 Fix RCE via project import mechanism
|
2018-01-16 17:04:51 -08:00 |
|
James Edwards-Jones
|
334915d508
|
Merge branch 'import-symlinks-9-3' into 'security-9-3'
Fix file disclosure via hidden symlinks using the project import (9.3)
See merge request !2164
|
2017-08-10 20:42:01 +01:00 |
|
Douwe Maan
|
dc9b3db8b0
|
Merge branch 'fix/import-export-symlink-vulnerability' into 'security'
Fix symlink vulnerability in Import/Export
Replaces https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2018 made by @james
Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/23822
See merge request !2022
Signed-off-by: Rémy Coutable <remy@rymai.me>
|
2016-11-03 16:04:18 +01:00 |
|
James Lopez
|
958d9f11e8
|
fix export project file permissions issue
|
2016-09-30 16:10:48 +02:00 |
|
James Lopez
|
81495528f9
|
refactored wait_for_archived_file method
|
2016-08-01 11:07:06 +02:00 |
|
James Lopez
|
dad1d0b864
|
fix return value and spec
|
2016-08-01 09:15:11 +02:00 |
|
James Lopez
|
52bb564812
|
squashed - fix timing issues in prod importing projects
added changelog
fix specs
refactored code based on feedback
fix rubocop warning
|
2016-08-01 09:15:11 +02:00 |
|
James Lopez
|
46b89a270f
|
Fix tmp file being deleted after the request plus some cleanup and improved erroring for this situation
|
2016-06-24 10:50:23 +02:00 |
|
James Lopez
|
3f7ed55011
|
lots of refactoring to reuse import service
|
2016-06-14 12:47:07 +02:00 |