gitlab-org--gitlab-foss/app/views/projects/diffs
blackst0ne 350e26b8a6 [Rails5] Use safe_params instead of params in url_for helpers
This commits replaces `params` with `safe_params` in `url_for` helpers
to resolve security issues [1] and failing specs with the

```
ArgumentError:
  Attempting to generate a URL from non-sanitized request parameters!
  An attacker can inject malicious data into the generated URL, such as
  changing the host. Whitelist and sanitize passed parameters to be secure.
```

error.

[1]: https://gitlab.com/gitlab-org/gitlab-ce/issues/45168
2018-04-28 21:35:16 +11:00
..
viewers Commenting on image diffs 2017-10-07 04:25:17 +00:00
_collapsed.html.haml [Rails5] Add safe_params helper 2018-04-08 15:35:30 +11:00
_content.html.haml Implement diff viewers 2017-06-14 10:12:21 -05:00
_diffs.html.haml [Rails5] Use safe_params instead of params in url_for helpers 2018-04-28 21:35:16 +11:00
_file.html.haml refactor code based on feedback 2018-02-23 14:02:40 +01:00
_file_header.html.haml Added LFS to merge request files tracked by LFS 2018-01-10 11:00:33 +00:00
_image_diff_frame.html.haml Commenting on image diffs 2017-10-07 04:25:17 +00:00
_line.html.haml Render add-diff-note button with server. 2017-06-29 12:50:45 -04:00
_parallel_view.html.haml Only copy old/new code when selecting left/right side of parallel diff 2017-10-02 18:39:25 +02:00
_render_error.html.haml Implement diff viewers 2017-06-14 10:12:21 -05:00
_replaced_image_diff.html.haml Use app host instead of asset host when rendering image blob or diff 2017-12-12 09:48:06 +01:00
_single_image_diff.html.haml Use app host instead of asset host when rendering image blob or diff 2017-12-12 09:48:06 +01:00
_stats.html.haml Resolve "GitLab Community Edition 10.5.3 shows plural for 1 item" 2018-03-19 11:53:35 +00:00
_text_file.html.haml Clean up diff rendering 2017-05-23 15:37:05 -05:00
_viewer.html.haml Implement diff viewers 2017-06-14 10:12:21 -05:00
_warning.html.haml Create and use project path helpers that only need a project, no namespace 2017-07-05 11:11:59 -05:00