Stan Hu 027c3264ad Guard against a login attempt with invalid CSRF token ... If a user logs in with a bad CSRF token, the Warden before_logout hook will be called with no valid user. This would lead to odd Error 500 messages with a backtrace. Addresses part of #50857		2018-09-26 12:20:43 -07:00
..
0_acts_as_taggable.rb
0_as_concern.rb	Properly implement prepending for Concern	2018-09-11 18:45:49 +08:00
0_inflections.rb
0_post_deployment_migrations.rb	Ensure the schema is loaded with post_migrations included	2018-09-11 18:41:14 -07:00
01_secret_token.rb	Upgrade to Ruby 2.4.4	2018-05-29 15:19:33 -07:00
1_settings.rb	Enable omniauth by default	2018-09-13 13:44:04 +01:00
2_gitlab.rb	Eliminate constants warnings by:	2018-06-01 13:46:46 +08:00
5_backend.rb
6_validations.rb	Migrate storage nesting check to Gitaly	2018-06-27 16:20:03 +00:00
7_prometheus_metrics.rb	Disable the background Prometheus sampler in tests	2018-05-24 06:02:39 -07:00
7_redis.rb
8_gitaly.rb
8_metrics.rb	Remove instrumentation Rouge::Plugins::{Redcarpet,CommonMark}	2018-07-23 09:52:13 -07:00
9_fast_gettext.rb	Define custom base controller for Doorkeeper	2018-04-30 11:40:51 +02:00
action_mailer_hooks.rb	Implement action mailer delivery metrics observer	2018-07-16 13:40:55 +02:00
active_record_array_type_casting.rb	[Rails5] Update type_cast_*_database methods	2018-04-06 10:57:19 +00:00
active_record_avoid_type_casting_in_uniqueness_validator.rb	Fix rails 5 deprecation warnings	2018-09-11 18:14:37 +02:00
active_record_data_types.rb	Mysql fixes for Rails 5	2018-06-21 22:06:50 +02:00
active_record_locking.rb	Updates from rubocop -a	2018-07-09 21:13:08 +08:00
active_record_migration.rb	Use data_source_exists? instead of table_exists?	2018-06-14 08:39:43 +02:00
active_record_mysql_timestamp.rb
active_record_preloader.rb
active_record_schema_ignore_tables.rb
active_record_table_definition.rb	Rails5 MySQL fix rename_column as part of cleanup_concurrent_column_type_change	2018-07-09 23:27:06 +02:00
active_record_verbose_query_logs.rb	Rails5: Enable verbose query logs	2018-08-16 08:25:06 +02:00
application_controller_renderer.rb	[Rails5] Update files by rails app:update	2018-03-22 09:37:57 +11:00
ar5_batching.rb	[Rails5] Update ar5_batching initializer	2018-03-21 09:15:42 +11:00
ar5_pg_10_support.rb	[Rails5] Update ar5_pg_10_support initializer	2018-03-21 09:21:33 +11:00
ar_native_database_types.rb	Address review comments.	2018-03-16 13:35:27 +01:00
ar_speed_up_migration_checking.rb
asset_sync.rb
attr_encrypted_no_db_connection.rb
backtrace_silencers.rb	Include the ee/ directory in backtraces	2018-03-12 10:14:52 +00:00
batch_loader.rb
bootstrap_form.rb	Replace label-light with label-bold. Because it's bold, not light	2018-07-19 17:11:31 -05:00
bullet.rb
carrierwave_patch.rb	Fix attachments not displaying inline with Google Cloud Storage	2018-09-05 17:01:54 -07:00
chronic_duration.rb
connection_fix.rb
console_message.rb	better handle a missing gitlab-shell version	2018-05-30 11:52:36 -05:00
cookies_serializer.rb
date_time_formats.rb
default_url_options.rb
deprecations.rb	Conditionally add Gitaly deprecation warnings based on ENV variable	2018-05-17 10:35:34 -07:00
devise.rb	Fix grammar (setup to set-up) in code comments, spec, views, etc.	2018-09-17 09:17:33 +00:00
devise_password_length.rb.example
direct_upload_support.rb	Update validator	2018-06-04 22:31:01 +02:00
doorkeeper.rb	Enabling Doorkeeper reuse_access_token option	2018-06-29 09:40:41 +00:00
doorkeeper_openid_connect.rb	Don't hash user ID in OIDC subject claim	2018-06-28 15:31:47 +02:00
etag_caching.rb
fix_local_cache_middleware.rb
flipper.rb	Ensure Flipper memoizer is used in Sidekiq's context	2018-05-18 12:25:54 +02:00
fog_google_https_private_urls.rb	Fix attachments not displaying inline with Google Cloud Storage	2018-09-05 17:01:54 -07:00
forbid_sidekiq_in_transactions.rb	Ensure we're using Rails, not Sidekiq::Rails	2018-05-04 15:58:18 +10:00
gettext_rails_i18n_patch.rb	Frontend: Proper gettext extraction with gettext-extractor	2018-08-16 19:03:57 +00:00
gitlab_shell_secret_token.rb
gitlab_workhorse_secret.rb
go_get.rb
gollum.rb	Fix finding wiki pages when they have invalidly-encoded content	2018-05-09 18:03:03 +02:00
grpc.rb
hamlit.rb
health_check.rb
kaminari_config.rb
kubeclient.rb	Fix rubocop	2018-05-23 14:55:26 +01:00
lograge.rb	Add User-Agent to production_json.log	2018-09-05 14:43:09 -07:00
mime_types.rb	register ico mime type	2018-06-05 16:20:20 +02:00
mini_magick.rb	force minimagick to use graphicsmagick	2018-06-05 16:20:22 +02:00
mysql_ignore_postgresql_options.rb
mysql_set_length_for_binary_indexes.rb	Make MySQL patch for binary indexes compatible with composite indexes	2018-09-04 18:52:03 -04:00
new_framework_defaults.rb	[Rails5] Update files by rails app:update	2018-03-22 09:37:57 +11:00
omniauth.rb	Disable SAML if OmniAuth is disabled	2018-07-20 18:54:46 +08:00
pages.rb	Add gitlab-pages admin ping rake task	2018-04-27 11:01:54 +00:00
peek.rb	Remove peek-sidekiq	2018-09-12 10:13:19 +02:00
postgresql_cte.rb
postgresql_limit_fix.rb
postgresql_opclasses_support.rb	Rails 5: include opclasses in rails 5 schema dump	2018-08-29 21:56:18 +02:00
premailer.rb
query_limiting.rb
rack_attack.rb.example
rack_attack_git_basic_auth.rb
rack_attack_global.rb	Backport of https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/5876	2018-05-29 15:25:43 +03:00
rack_attack_logging.rb
rack_lineprof.rb
relative_naming_ci_namespace.rb
relative_url.rb.sample
request_context.rb
request_profiler.rb
routing_draw.rb
rspec_profiling.rb
sentry.rb	Replace Gitlab::REVISION with Gitlab.revision and handle installations without a .git directory	2018-05-24 10:14:01 +02:00
server_uptime.rb
session_store.rb	Display and revoke active sessions	2018-05-02 08:08:16 +00:00
sherlock.rb
sidekiq.rb	Remove background job throttling feature	2018-09-24 18:41:14 +03:00
smtp_settings.rb.sample
static_files.rb	Fix rails 5 deprecation warnings	2018-09-11 18:14:37 +02:00
time_zone.rb
trusted_proxies.rb	[Rails5] Fix trusted proxies	2018-05-03 20:14:20 +11:00
warden.rb	Guard against a login attempt with invalid CSRF token	2018-09-26 12:20:43 -07:00
workhorse_multipart.rb
wrap_parameters.rb