gitlab-org--gitlab-foss/config/initializers
Rémy Coutable d1afb845b1 Merge branch 'fix-shibboleth-auth-with-no-uid' into 'master'
fix shibboleth misconfigurations resulting in authentication bypass

This merge request fixes #22267 where a misconfigured Shibboleth `HTTP_UID` or `HTTP_EPPN` could result in users being logged into an account that did not belong to them.

See merge request !7428
2016-11-16 17:28:56 +00:00
..
0_post_deployment_migrations.rb Support for post deployment migrations 2016-10-31 12:54:48 +01:00
1_settings.rb Issue #13823: random message when all Todos are Done 2016-11-11 20:59:54 +01:00
2_app.rb
4_ci_app.rb
5_backend.rb
6_validations.rb
7_redis.rb Initialize Redis pool in single-threaded context 2016-09-30 12:27:43 +02:00
active_record_query_trace.rb
ar5_batching.rb Add markdown cache columns to the database, but don't use them yet 2016-10-07 02:54:25 +01:00
ar_monkey_patch.rb
ar_speed_up_migration_checking.rb Memoize ActiveRecord::Migrator.migrations in tests 2016-10-06 19:14:57 +01:00
attr_encrypted_no_db_connection.rb Use Module#prepend instead of alias_method_chain 2016-09-30 07:08:25 -03:00
backtrace_silencers.rb
bullet.rb
carrierwave.rb
chronic_duration.rb
connection_fix.rb Update warn message for MySQL fix 2016-09-28 23:48:32 +00:00
cookies_serializer.rb
date_time_formats.rb
default_url_options.rb
devise.rb Merge branch 'fix-shibboleth-auth-with-no-uid' into 'master' 2016-11-16 17:28:56 +00:00
devise_password_length.rb.example
disable_email_interceptor.rb
doorkeeper.rb
gitlab_shell_secret_token.rb Load Github::Shell's secret token from file on initialization instead of every request. 2016-10-06 11:22:37 -04:00
gitlab_workhorse_secret.rb
go_get.rb
gollum.rb
hamlit.rb
health_check.rb
inflections.rb
kaminari_config.rb
metrics.rb Add instrumentation to conflict classes 2016-10-13 14:16:34 -05:00
mime_types.rb No need for this variable. 2016-09-12 14:23:32 -06:00
mysql_ignore_postgresql_options.rb
omniauth.rb
postgresql_limit_fix.rb Use Module#prepend instead of alias_method_chain 2016-09-30 07:08:25 -03:00
postgresql_opclasses_support.rb
premailer.rb
public_key.rb
rack_attack.rb.example
rack_attack_git_basic_auth.rb
rack_lineprof.rb
relative_naming_ci_namespace.rb
relative_url.rb.sample
request_profiler.rb
routing_draw.rb Refactor project routing 2016-11-07 17:14:34 +02:00
secret_token.rb
sentry.rb Don't send Private-Token headers to Sentry 2016-10-04 16:57:01 +02:00
session_store.rb
sherlock.rb
sidekiq.rb Refactored initializer code to its own class and added tests 2016-11-10 11:38:11 -06:00
smtp_settings.rb.sample
static_files.rb
time_zone.rb
trusted_proxies.rb
wrap_parameters.rb