Commit Graph

9 Commits

Author SHA1 Message Date
Phil Hughes 2f7b71df76 Merge branch '10-7-security_issue_42029' into 'security-10-7'
Sanitize user name to avoid XSS attacks

See merge request gitlab/gitlabhq!2373
2018-04-30 15:01:01 -05:00
Filipa Lacerda 3e6e2ef60d
Removes eslint disabled comments 2018-03-29 18:56:19 +01:00
Achilleas Pipinellis 85940d766a
Default to HTTPS for all Gravatar URLs
If using gravatar.com, both plain_url and ssl_url in settings are now
served via HTTPS. Make this the default.
2018-01-25 10:00:46 +01:00
Yorick Peterse d0b8f536a1
Remove soft removals related code
This removes all usage of soft removals except for the "pending delete"
system implemented for projects. This in turn simplifies all the query
plans of the models that used soft removals. Since we don't really use
soft removals for anything useful there's no point in keeping it around.

This _does_ mean that hard removals of issues (which only admins can do
if I'm not mistaken) can influence the "iid" values, but that code is
broken to begin with. More on this (and how to fix it) can be found in
https://gitlab.com/gitlab-org/gitlab-ce/issues/31114.

Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/37447
2018-01-08 17:04:45 +01:00
Eric Eastwood f3433d8a68 Backport changes from refactor sidebar weight block Vue and move to Issue Boards
See https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/3566
2017-12-04 15:02:48 -06:00
Eric Eastwood 6dc9028fbb Load participants async 2017-10-31 16:15:03 +00:00
Eric Eastwood 90c60138db Move "Move to different project" to sidebar
Fix https://gitlab.com/gitlab-org/gitlab-ce/issues/34261
2017-09-03 22:03:17 -05:00
Clement Ho f1d48c25a2 Fix failing spec and eslint 2017-05-05 14:45:21 -05:00
Clement Ho 48e4991907 Add sidebar specs 2017-05-05 13:23:31 -05:00