gitlab-org--gitlab-foss

Commit Graph

Author	SHA1	Message	Date
GitLab Bot	c59765a50a	Add latest changes from gitlab-org/gitlab@master	2020-06-24 18:09:03 +00:00
Thong Kuah	8c42a0eac0	Add frozen_string_literal to lib part 2 Using the sed script from https://gitlab.com/gitlab-org/gitlab-ce/issues/59758	2019-08-23 00:15:24 +12:00
Kamil Trzciński	66744469d4	Extract GitLab Pages using RubyZip RubyZip allows us to perform strong validation of expanded paths where we do extract file. We introduce the following additional checks to extract routines: 1. None of path components can be symlinked, 2. We drop privileges support for directories, 3. Symlink source needs to point within the target directory, like `public/`, 4. The symlink source needs to exist ahead of time.	2019-01-31 16:52:48 +01:00

Author

SHA1

Message

Date

GitLab Bot

c59765a50a

Add latest changes from gitlab-org/gitlab@master

2020-06-24 18:09:03 +00:00

Thong Kuah

8c42a0eac0

Add frozen_string_literal to lib part 2

Using the sed script from
https://gitlab.com/gitlab-org/gitlab-ce/issues/59758

2019-08-23 00:15:24 +12:00

Kamil Trzciński

66744469d4

Extract GitLab Pages using RubyZip

RubyZip allows us to perform strong validation of
expanded paths where we do extract file.

We introduce the following additional checks
to extract routines:

1. None of path components can be symlinked,
2. We drop privileges support for directories,
3. Symlink source needs to point within the target directory,
   like `public/`,
4. The symlink source needs to exist ahead of time.

2019-01-31 16:52:48 +01:00

3 Commits