Commit Graph

11 Commits

Author SHA1 Message Date
Mayra Cabrera 3cefc5d7df Add RateLimiter to RawController
* Limits raw requests to 300 per minute and per raw path.
* Add a new attribute to ApplicationSettings so user can change this
value on their instance.
* Uses Gitlab::ActionRateLimiter to limit the raw requests.
* Add a new method into ActionRateLimiter to log the event into auth.log

Related to https://gitlab.com/gitlab-org/gitlab-ce/issues/48717
2019-07-24 19:49:31 +00:00
Reuben Pereira e5bdcfbc9b [ADD] outbound requests whitelist
Signed-off-by: Istvan szalai <istvan.szalai@savoirfairelinux.com>
2019-07-24 17:59:38 +00:00
Roger Meier 946ffc67b7 refactor: remove Sentry from application settings 2019-06-25 21:17:19 +02:00
Heinrich Lee Yu 275a17589c Rename to time_tracking_limit_to_hours
Changes migration and all other places the attribute is used
2019-06-25 09:31:23 +08:00
Jon Kolb 4e283ee706 Limit time tracking values to hours
Adds an instance setting to limit display of time tracking
values to hours only
2019-06-25 09:31:23 +08:00
Oswaldo Ferreira a1a0f8e6b0 Add DNS rebinding protection settings 2019-05-30 10:47:57 -03:00
Stan Hu f93b2e02a5 Run rubocop -a on CE files 2019-05-05 03:24:28 -07:00
Douglas Barbosa Alexandre 6627efd6b4
Allow Sentry client-side DSN to be passed on gitlab.yml 2019-05-01 15:23:11 -03:00
Roger Meier aebb2f7025 feat: allow Sentry configuration to be passed on gitlab.yml 2019-04-30 18:10:57 +02:00
Gosia Ksionek 64858317ad Add part of needed code
Add columns to store project creation settings

Add project creation level column in groups
 and default project creation column in application settings

Remove obsolete line from schema

Update migration with project_creation_level column existence check

Rename migrations to avoid conflicts

Update migration methods

Update migration method
2019-04-05 18:49:46 +00:00
Lin Jen-Shin 6b0d493350 Introduce ApplicationSettingImplementation yay
So the fake can enjoy it, too. We don't use `prepend`
because that'll require we change `allow_any_instance_of` to
`expect_next_instance_of`, but that's not very easy to do.
We can do that later.
2019-03-19 13:01:37 +08:00