Commit graph

3 commits

Author SHA1 Message Date
Thong Kuah
8c42a0eac0 Add frozen_string_literal to lib part 2
Using the sed script from
https://gitlab.com/gitlab-org/gitlab-ce/issues/59758
2019-08-23 00:15:24 +12:00
Nick Thomas
69645389e9
Prevent a path traversal attack on global file templates
The API permits path traversal characters like '../' to be passed down
to the template finder. Detect these requests and cause them to fail
with a 500 response code.
2018-12-05 14:12:35 +00:00
Nick Thomas
ffd164d27f
Fix bugs in Gitlab::Template::Finders preventing instances from BaseTemplate.all from loading content 2018-08-14 22:28:46 +01:00