gitlab-org--gitlab-foss

Commit Graph

Author	SHA1	Message	Date
Alexandru Croitor	be3578d245	Add array support for labels * Support label parameter as comma separated and array of strings for merge requests and issues api endpoints	2019-03-06 13:28:42 +02:00
Stan Hu	a12d25d8a5	Validate Wiki attachments are valid temporary files A malicious attacker could craft a request to read arbitrary files on the system. This change adds a Grape validation to ensure that the tempfile parameter delivered by the Rack multipart uploader is a Tempfile type to prevent users from being able to specify arbitrary filenames. Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/53072	2018-10-23 20:47:38 -07:00

Author

SHA1

Message

Date

Alexandru Croitor

be3578d245

Add array support for labels

* Support label parameter as comma separated and array of strings
for merge requests and issues api endpoints

2019-03-06 13:28:42 +02:00

Stan Hu

a12d25d8a5

Validate Wiki attachments are valid temporary files

A malicious attacker could craft a request to read arbitrary files on
the system. This change adds a Grape validation to ensure that the
tempfile parameter delivered by the Rack multipart uploader is a
Tempfile type to prevent users from being able to specify arbitrary
filenames.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/53072

2018-10-23 20:47:38 -07:00

2 Commits