Cindy Pallares
fe5f75930e
Merge branch 'security-fix-pat-web-access' into 'master'
...
[master] Resolve "Personal access token with only `read_user` scope can be used to authenticate any web request"
See merge request gitlab/gitlabhq!2583
2018-11-28 19:13:59 -05:00
gfyoung
73322a0e55
Enable frozen string in app/controllers/**/*.rb
...
Enables frozen string for the following:
* app/controllers/*.rb
* app/controllers/admin/**/*.rb
* app/controllers/boards/**/*.rb
* app/controllers/ci/**/*.rb
* app/controllers/concerns/**/*.rb
Partially addresses #47424 .
2018-09-18 21:22:45 -07:00
Bob Van Landuyt
c443133e77
Handle exceptions outside the GraphQL schema
...
This allows us to report JSON parse exceptions to clients and ignore
them in sentry.
2018-06-05 20:47:42 +02:00
Nick Thomas
9c6c17cbcd
Add a minimal GraphQL API
2018-06-05 20:47:42 +02:00
