Коммиты · ac-fix-12-1 · nt_test133 / nt_project_uxpg8lvcuq8w

13.12.2019 8 коммитов
- Simplify static-analysis output generation
  
  · aa79ec3c
  
  Stan Hu создал Дек 06, 2019
```
The buffering of the output may be causing issues, so let's disable it
for now.
```
  aa79ec3c
- Merge branch 'backport-21510-12-1' into '12-1-stable'
  
  · feb48996
  
  John Skarbek создал Дек 13, 2019
```
Install lsb-release for repo URL construction

See merge request gitlab/gitlabhq!3591
```
  feb48996
- Install lsb-release for repo URL construction
  
  · c3f2e9dd
  
  Kyle Wiebers создал Дек 10, 2019
  
  c3f2e9dd
- Adds message to indicate we are skipping release 12.1.16
  
  · b7318768
  
  John T Skarbek создал Дек 13, 2019
  
  b7318768
- Revert "Update CHANGELOG.md for 12.1.16"
  
  · a5525dca
  
  John T Skarbek создал Дек 13, 2019
```
This reverts commit 0455f2f3.
```
  a5525dca
- Revert "Update VERSION to 12.1.16"
  
  · 02d19940
  
  John T Skarbek создал Дек 13, 2019
```
This reverts commit d2e3962c.
```
  02d19940
- Update VERSION to 12.1.16
  
  · d2e3962c
  
  GitLab Release Tools Bot создал Дек 12, 2019
  
  d2e3962c
- Update CHANGELOG.md for 12.1.16
  
  · 0455f2f3
  
  GitLab Release Tools Bot создал Дек 12, 2019
```
[ci skip]
```
  0455f2f3
12.12.2019 3 коммита
- Adds message to indicate we are skipping release 12.1.15
  
  · 050c4bae
  
  John T Skarbek создал Дек 12, 2019
  
  050c4bae
- Revert "Update CHANGELOG.md for 12.1.15"
  
  · c3efab6f
  
  John T Skarbek создал Дек 12, 2019
```
This reverts commit 2404e6c7.
```
  c3efab6f
- Revert "Update VERSION to 12.1.15"
  
  · 7cb933eb
  
  John T Skarbek создал Дек 12, 2019
```
This reverts commit fa242b39.
```
  7cb933eb
11.12.2019 3 коммита
- Update VERSION to 12.1.15
  
  · fa242b39
  
  GitLab Release Tools Bot создал Дек 11, 2019
  
  fa242b39
- Update CHANGELOG.md for 12.1.15
  
  · 2404e6c7
  
  GitLab Release Tools Bot создал Дек 11, 2019
```
[ci skip]
```
  2404e6c7
- Merge branch '12-1-stable-backport-reliable-fetcher' into '12-1-stable'
  
  · c6d2d169
  
  John Skarbek создал Дек 10, 2019
```
Backport reliable fetcher to 12.1

See merge request gitlab/gitlabhq!3584
```
  c6d2d169
09.12.2019 2 коммита

· 8a53d47d

Valery Sizov создал Дек 09, 2019

backport https://gitlab.com/gitlab-org/gitlab/commit/2be136b6cdf59f4664d9fbbe91e16498a47ba227
see https://gitlab.com/gitlab-org/gitlab/commit/3baeb0c7fd6829b8c083a43370163d16f7700263
see https://gitlab.com/gitlab-org/gitlab/merge_requests/21161

8a53d47d

Backport reliable fetcher

· a2af8dc5

Valery Sizov создал Дек 09, 2019

a2af8dc5

24.10.2019 3 коммита

Merge branch 'security-stored-xss-using-find-file-12-1' into '12-1-stable'

· 41948c2c

GitLab Release Tools Bot создал Окт 24, 2019
```
Sanitize search text to prevent XSS

See merge request gitlab/gitlabhq!3471
```
41948c2c
Merge branch 'security-xss-grafana-url-12-1' into '12-1-stable'

· 27e6daa2

GitLab Release Tools Bot создал Окт 24, 2019
```
Handle Stored XSS for Grafana URL in settings

See merge request gitlab/gitlabhq!3483
```
27e6daa2

Handle Stored XSS for Grafana URL in settings

· 9a0dc3fa

David Wilkins создал Окт 24, 2019

- Extend Gitlab::UrlBlocker to allow relative urls (require_absolute
  setting).  The new `require_absolute` setting defaults to true,
  which is the existing behavior.

- Extend AddressableUrlValidator to accept `require_abosolute` and
  default to the existing behavior

- Add validation for ApplicationSetting#grafana_url to validate that
  the URL does not contain XSS but can be a valid relative or absolute
  url.

- In the case of existing stored URLs, validate the stored URL does
  not contain XSS. If the stored URL contains stored XSS or is an
  otherwise invalid URL, return the default database column value.

- Add tests for Gitlab::UrlBlocker to test require_absolute setting

- Add tests for AddressableUrlValidator

- Add tests for ApplicationSetting#grafana_url

9a0dc3fa

11.10.2019 1 коммит
- Sanitize search text to prevent XSS
  
  · 88f00c71
  
  samantha-dev создал Сен 27, 2019
  
  88f00c71
07.10.2019 3 коммита
- Merge remote-tracking branch 'dev/12-1-stable' into 12-1-stable
  
  · 3e2d0afa
  
  GitLab Release Tools Bot создал Окт 07, 2019
  
  3e2d0afa
- Update VERSION to 12.1.14
  
  · ef8aaefd
  
  GitLab Release Tools Bot создал Окт 07, 2019
  
  ef8aaefd
- Update CHANGELOG.md for 12.1.14
  
  · 6e62be75
  
  GitLab Release Tools Bot создал Окт 07, 2019
```
[ci skip]
```
  6e62be75
02.10.2019 1 коммит
- Merge remote-tracking branch 'dev/12-1-stable' into 12-1-stable
  
  · ed21ca8e
  
  GitLab Release Tools Bot создал Окт 02, 2019
  
  ed21ca8e
01.10.2019 5 коммитов
- Update VERSION to 12.1.13
  
  · c6128d82
  
  GitLab Release Tools Bot создал Окт 01, 2019
  
  c6128d82
- Update CHANGELOG.md for 12.1.13
  
  · 6317d49c
  
  GitLab Release Tools Bot создал Окт 01, 2019
```
[ci skip]
```
  6317d49c
- Merge branch 'security-29491-12-1-ce' into '12-1-stable'
  
  · cdfcbb00
  
  Marin Jankovski создал Окт 01, 2019
```
Fix private feature Elasticsearch leak

See merge request gitlab/gitlabhq!3452
```
  cdfcbb00
- EE port: Fix private feature Elasticsearch leak
  
  · ccb6a5a5
  
  Mark Chao создал Сен 16, 2019
```
Add spec to test different combinations.
Accept string for required_minimum_access_level
Allow more flexible project membership query
```
  ccb6a5a5
- Merge branch 'fix_expired_gpg_key_specs' into 'master'
  
  · f84dc8c1
  
  Stan Hu создал Сен 29, 2019
```
Fix broken specs : Generate new GPG key in place of expired one

Closes #32956

See merge request gitlab-org/gitlab!17853
```
  f84dc8c1
27.09.2019 2 коммита
- Update VERSION to 12.1.12
  
  · fd62f3a1
  
  GitLab Release Tools Bot создал Сен 26, 2019
  
  fd62f3a1
- Update CHANGELOG.md for 12.1.12
  
  · e728ba7e
  
  GitLab Release Tools Bot создал Сен 26, 2019
```
[ci skip]
```
  e728ba7e
26.09.2019 9 коммитов
- Merge branch 'security-gitaly-1-53-4' into '12-1-stable'
  
  · 47949f6a
  
  GitLab Release Tools Bot создал Сен 26, 2019
```
Fix Gitaly SearchBlobs flag RPC injection [Gitaly v1.53.4]

See merge request gitlab/gitlabhq!3435
```
  47949f6a
- Merge branch 'security-sarcila-verify-saml-request-origin-12-1' into '12-1-stable'
  
  · 1791e3e6
  
  GitLab Release Tools Bot создал Сен 26, 2019
```
Check that SAML identity linking validates the origin of the request

See merge request gitlab/gitlabhq!3376
```
  1791e3e6
- Merge branch 'security-xss-mermaid-12-1' into '12-1-stable'
  
  · 65a022ad
  
  GitLab Release Tools Bot создал Сен 26, 2019
```
Gitlab XSS in markdown preview page

See merge request gitlab/gitlabhq!3400
```
  65a022ad
- Merge branch...
  
  · 254b09ef
  
  GitLab Release Tools Bot создал Сен 26, 2019
```
Merge branch 'security-12717-fix-confidential-issue-assignee-visible-to-guests-12-1' into '12-1-stable'

Display only participants that user has permission to see

See merge request gitlab/gitlabhq!3403
```
  254b09ef
- Merge branch 'security-bypass-email-verification-using-salesforce-12-1' into '12-1-stable'
  
  · 116fb15b
  
  GitLab Release Tools Bot создал Сен 26, 2019
```
Prevent Bypassing Email Verification using Salesforce

See merge request gitlab/gitlabhq!3407
```
  116fb15b
- Merge branch 'security-mermaid-block-12-1' into '12-1-stable'
  
  · 84fd8316
  
  GitLab Release Tools Bot создал Сен 26, 2019
```
Only render fixed number of mermaid blocks

See merge request gitlab/gitlabhq!3413
```
  84fd8316
- Merge branch 'security-12718-project-milestones-disclosed-via-groups-12-1-ce' into '12-1-stable'
  
  · 61d21609
  
  GitLab Release Tools Bot создал Сен 26, 2019
```
Hide disabled project milestones in project settings on group level

See merge request gitlab/gitlabhq!3416
```
  61d21609
- Merge branch 'security-64938-dont-disclose-path-12-1-ce' into '12-1-stable'
  
  · 18771468
  
  GitLab Release Tools Bot создал Сен 26, 2019
```
Redirect user to root path after unsubscribing from private resource

See merge request gitlab/gitlabhq!3418
```
  18771468
- Merge branch 'security-12630-private-system-note-disclosed-in-graphql-12-1-ce' into '12-1-stable'
  
  · f6fce08b
  
  GitLab Release Tools Bot создал Сен 26, 2019
```
Add policy check if cross reference system notes are accessible

See merge request gitlab/gitlabhq!3428
```
  f6fce08b