gitlab-org--gitlab-foss/app/models/concerns
Robert Speicher 3e4b45fc21 Only include the user's ID in the time_spent command's update hash
Previously, this would include the entire User record in the update
hash, which was rendered in the response using `to_json`, erroneously
exposing every attribute of that record, including their (now removed)
private token.

Now we only include the user ID, and perform the lookup on-demand.
2017-12-19 15:45:08 -06:00
..
mentionable
storage
access_requestable.rb
artifact_migratable.rb Use job_artifacts_archive|metadata 2017-12-03 12:04:49 +01:00
avatarable.rb
awardable.rb
blob_like.rb
blocks_json_serialization.rb Add a JsonSerializationError class instead of raising SecurityError 2017-12-19 15:45:08 -06:00
bulk_member_access_load.rb Resolve "Display member role per project" 2017-12-07 09:11:41 +00:00
cache_markdown_field.rb Treat empty markdown and html strings as valid cached text, not missing cache that needs to be updated 2017-12-12 14:01:53 +00:00
case_sensitivity.rb
created_at_filterable.rb
discussion_on_diff.rb Allow commenting on individual commits inside an MR 2017-12-07 09:01:19 -05:00
each_batch.rb
editable.rb
expirable.rb
faster_cache_keys.rb
feature_gate.rb
ghost_user.rb
group_descendant.rb
has_status.rb
has_variable.rb Strip leading & trailing whitespaces in CI/CD secret variable keys 2017-11-27 18:09:46 +01:00
ignorable_column.rb
importable.rb
internal_id.rb
issuable.rb Merge branch 'dm-search-pattern' into 'master' 2017-11-29 09:10:43 +00:00
loaded_in_group_list.rb
manual_inverse_association.rb Use latest_merge_request_diff association 2017-11-23 12:14:56 +00:00
mentionable.rb Merge remote-tracking branch 'upstream/master' into no-ivar-in-modules 2017-11-30 15:20:00 +08:00
milestoneish.rb Use StrongMemoize and enable/disable cops properly 2017-11-18 01:01:53 +08:00
note_on_diff.rb
noteable.rb Move ModuleWithInstanceVariables to Gitlab namespace 2017-11-22 17:06:57 +08:00
participable.rb
presentable.rb
project_features_compatibility.rb
protected_branch_access.rb Deduplicate protected ref human_access_levels 2017-11-24 13:47:03 +00:00
protected_ref.rb
protected_ref_access.rb Deduplicate protected ref human_access_levels 2017-11-24 13:47:03 +00:00
protected_tag_access.rb
reactive_caching.rb
reactive_service.rb
referable.rb Fix link text from group context 2017-11-23 12:59:14 +01:00
relative_positioning.rb Move ModuleWithInstanceVariables to Gitlab namespace 2017-11-22 17:06:57 +08:00
resolvable_discussion.rb Move ModuleWithInstanceVariables to Gitlab namespace 2017-11-22 17:06:57 +08:00
resolvable_note.rb
routable.rb Move ModuleWithInstanceVariables to Gitlab namespace 2017-11-22 17:06:57 +08:00
select_for_project_authorization.rb
sha_attribute.rb
sortable.rb
spammable.rb Updates based on feedback 2017-11-22 00:59:38 +08:00
strip_attribute.rb
subscribable.rb
taskable.rb Move ModuleWithInstanceVariables to Gitlab namespace 2017-11-22 17:06:57 +08:00
throttled_touch.rb Throttle the number of UPDATEs triggered by touch 2017-12-06 15:59:37 +01:00
time_trackable.rb Only include the user's ID in the time_spent command's update hash 2017-12-19 15:45:08 -06:00
token_authenticatable.rb
uniquify.rb
valid_attribute.rb