gitlab-org--gitlab-foss/lib/api
Cindy Pallares a50c777d95 Merge branch '54857-fix-templates-path-traversal' into 'master'
[master]: Prevent a path traversal attack on global file templates

Closes #2745

See merge request gitlab/gitlabhq!2677
2018-12-06 18:38:43 +00:00
..
helpers Support lowercase none / any 2018-10-26 10:47:14 +08:00
validations/types Validate Wiki attachments are valid temporary files 2018-10-23 20:47:38 -07:00
access_requests.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
api.rb Merge branch 'if-52811-fix_namespaces_api_routing' into 'master' 2018-11-30 15:08:56 +00:00
api_guard.rb Add config to disable impersonation 2018-11-29 09:37:16 +01:00
applications.rb Use application finder for Doorkeeper Applications 2018-10-15 23:03:08 +09:00
avatar.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
award_emoji.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
badges.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
boards.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
boards_responses.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
branches.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
broadcast_messages.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
circuit_breakers.rb Remove Git circuit breaker 2018-10-10 09:08:18 +02:00
commit_statuses.rb Rename project's pipelines relation 2018-12-05 14:39:15 +00:00
commits.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
custom_attributes_endpoints.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
deploy_keys.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
deployments.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
discussions.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
entities.rb Merge branch '33705-merge-request-rebase-api' into 'master' 2018-11-29 08:36:04 +00:00
environments.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
events.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
features.rb Make getting a user by the username case insensitive 2018-10-18 09:06:44 +00:00
files.rb Use read_repository scope on read-only files API 2018-12-04 11:55:34 +01:00
group_boards.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
group_milestones.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
group_variables.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
groups.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
helpers.rb Set content disposition attachment to several endpoints 2018-11-23 16:44:09 +00:00
internal.rb Adds tracing messages for slow git pushes 2018-10-25 10:10:45 +01:00
issues.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
job_artifacts.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
jobs.rb Rename project's pipelines relation 2018-12-05 14:39:15 +00:00
keys.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
labels.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
lint.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
markdown.rb Merge branch 'security-bw-confidential-titles-through-markdown-api' into 'master' 2018-10-05 17:47:52 +00:00
members.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
merge_request_diffs.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
merge_requests.rb Merge branch 'if-52811-fix_namespaces_api_routing' into 'master' 2018-11-30 15:08:56 +00:00
milestone_responses.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
namespaces.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
notes.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
notification_settings.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
pages_domains.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
pagination_params.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
pipeline_schedules.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
pipelines.rb Rename project's pipelines relation 2018-12-05 14:39:15 +00:00
project_export.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
project_hooks.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
project_import.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
project_milestones.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
project_snapshots.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
project_snippets.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
project_templates.rb Backport project template API to CE 2018-10-05 11:34:43 +01:00
projects.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
projects_relation_builder.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
protected_branches.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
protected_tags.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
repositories.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
resource_label_events.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
runner.rb Remove Rubocop override that is no longer necessary 2018-11-20 15:26:38 +01:00
runners.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
scope.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
search.rb Optimized file search to work without limits 2018-12-06 09:25:09 +01:00
services.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
settings.rb Remove Koding integration and documentation 2018-10-12 22:18:51 -07:00
sidekiq_metrics.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
snippets.rb Set content disposition attachment to several endpoints 2018-11-23 16:44:09 +00:00
submodules.rb Add submodule update API endpoint 2018-11-07 14:03:30 +01:00
subscriptions.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
system_hooks.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
tags.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
templates.rb Prevent a path traversal attack on global file templates 2018-12-05 14:12:35 +00:00
time_tracking_endpoints.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
todos.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
triggers.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
users.rb Display impersonation token value only after creation 2018-11-12 12:16:25 +01:00
variables.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00
version.rb Enable frozen string in lib/api and lib/backup 2018-09-29 21:04:50 -07:00
wikis.rb Fix API::Namespaces to accept namepaces with dots 2018-11-28 12:54:11 +01:00