kotovalexarian-likes-gitlab/gitlab-org--gitlab-foss
1
0
Fork 0
Code Releases Activity
102967 commits 1 branch 0 tags 899 MiB
Commit graph

8 commits

Author SHA1 Message Date
GitLab Bot
b7dfe2ae40 Add latest changes from gitlab-org/gitlab@master 2019-09-13 13:26:31 +00:00
Alessio Caiazza
e32069ef6c Process workhorse accelerated wiki uploads 
Wiki attachments can be workhorse accelerated.
This commit is backward compatible with older workhorse
 2019-09-06 15:53:13 +02:00
Brett Walker
ad05e48863 Add support for using a Camo proxy server 
User images and videos will get proxied through
the Camo server in order to keep malicious
sites from collecting the IP address of users.
 2019-08-23 23:44:53 -05:00
Peter Leitzen
8136fac26c Prefer flat_map over map + flatten 
Convert several occurrences of `map` + `flatten` to
`flat_map` where applicable.
 2019-07-26 10:44:13 +00:00
Alexandru Croitor
9ff6edf690 Review updates and cleanup 
* Cleaned issues and issues_statistics docs
* Renamed param with_labels_data to with_labels_details
* Added spec for N+1 check when retrieving labels from issue
* Refactoed CheckAssigneesCount validation class
 2019-05-17 13:56:25 +03:00
Alexandru Croitor
f117c032ac Add params validations and remove extra params support 
Remove label_name and milestone_title params support
Add mutually_exclusive validation for author_id and author_username
Add mutually_exclusive validation for assignee_id and assignee_username
Add validation to allow single value for asignee_username on CE
Add separate issue_stats_params helper for statistics params and
reuse in issues_params.
 2019-05-15 10:15:17 +03:00
Alexandru Croitor
be3578d245 Add array support for labels 
* Support label parameter as comma separated and array of strings
for merge requests and issues api endpoints
 2019-03-06 13:28:42 +02:00
Stan Hu
a12d25d8a5 Validate Wiki attachments are valid temporary files 
A malicious attacker could craft a request to read arbitrary files on
the system. This change adds a Grape validation to ensure that the
tempfile parameter delivered by the Rack multipart uploader is a
Tempfile type to prevent users from being able to specify arbitrary
filenames.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/53072
 2018-10-23 20:47:38 -07:00