Commit graph

10 commits

Author SHA1 Message Date
Robert Schilling
5b29f06611 Only require one parameter when updating a Wiki via the API 2019-02-13 16:35:27 +00:00
Robert Schilling
96a49c79aa API: Support dots in wiki slugs 2019-01-15 09:02:00 +01:00
blackst0ne
b44a2c801a Update specs to rails5 format
Updates specs to use new rails5 format.

The old format:
`get :show, { some: params }, { some: headers }`

The new format:
`get :show, params: { some: params }, headers: { some: headers }`
2018-12-19 10:04:31 +11:00
Stan Hu
a12d25d8a5 Validate Wiki attachments are valid temporary files
A malicious attacker could craft a request to read arbitrary files on
the system. This change adds a Grape validation to ensure that the
tempfile parameter delivered by the Rack multipart uploader is a
Tempfile type to prevent users from being able to specify arbitrary
filenames.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/53072
2018-10-23 20:47:38 -07:00
Francisco Javier López
f9475e299c Uploads to wiki stored inside the wiki git repository 2018-09-04 10:39:08 +00:00
Mark Chao
a63bce1a4b Resolve "Rename the Master role to Maintainer" Backend 2018-07-11 14:36:08 +00:00
Zeger-Jan van de Weg
92482e01b4
Bump Gitaly to 0.98.0
Hooks were run for wikis, but given the internal API wasn't responding
failures happended, as seen on:
https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/18693
2018-05-07 14:10:04 +02:00
Rubén Dávila
cf8f09636b Fix API endpoints to edit wiki pages where project belongs to a group
In some cases is prefered to manually create a ProjectWiki over using
Project#wiki. This is because Project#wiki always uses the #owner (which
is a User sometimes) as the
author of the wiki changes but sometimes the owner is a Group and it
doesn't respond to #username
2018-01-03 00:22:01 -05:00
Jacopo
2f40dac352 Refactor have_http_status into have_gitlab_http_status in the specs 2017-10-20 10:13:18 +02:00
blackst0ne
2915bb2707 Add API support for wiki pages 2017-09-07 09:21:52 +11:00