Escape before autolink

Because auto_link set description to html_safe but dont escape html!!! :(

See merge request !963

Add html_escape to project description. auto_link set description to html_safe but! dont escape html :(.
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

Upgrade devise from 3.0.4 to 3.2.4

See merge request !960

Rework counters

* Use one style for counters in sidebar
* show amount of assigned/authored/all entities in sidebar
* fixes UI overflow for small screens

See merge request !961

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

Fix gitlab_markdown_helper method header typo. rquest => request.

Prevent html injection

Commits page renders commit description with single_format method which allows html tags. So commit message with html tags brokers Commits page. See screenshot

![Screenshot 2014-07-10 11.16.40](https://dev.gitlab.org/uploads/gitlab/gitlabhq/6606e1bac0/Screenshot_2014-07-10_11.16.40.png)

See merge request !959

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

Group milestones description

Fixes #1403

See merge request !958

Get Reply button as clicked target in notes.js.coffee

See issue #401

This is a small fix to properly find the reply button as the click target when an element inside the button is clicked (e.g. in this case, the ``<i class="icon-comment">`` element in the button, using the jQuery ``.closest(...)`` function.

Previously, the clicked element was assumed to be the button itself, which caused the comment form to spawn within the button when it was clicked (see the issue for screenshots & other details).

This is to fix the issue where the icon-comment icon is clicked in the
Reply button of a note; the icon is used as the target and incorrectly
assumed to be the button itself, which causes the reply form to spawn
inside the button.

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

Browse file

Fixes #1335

See merge request !951

Active highlight

This will highlight active page regardless of the action we use.

See merge request !957

Update highlight.js to 8.1

Pack version including all supported languages. Yay for Haml, Clojure, Go and Erlang support!

Fixes #1411.

See merge request !956

Also added support for less common languages. All languages from
http://highlightjs.org/download/ now supported
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

Redirect between tree and blob

This checks if on requested non-existing tree path blob exists, redirects to blob path if the file exists, otherwise return not found.

See #1369

See merge request !953

Fix path regex

Fixes #1208

See merge request !955

Because it causes 500 error on every page where link to such project
exists
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

Fix archive corruption

* When I click download I trigger archive creation
* We don't use tmp storage for uncompleted archive
* When I refresh a page - archiving still in progress but file already exists - I get corrupted (unfinished) file
* If I wait for few more seconds and click download - I get correct file because archiving operation finished and file is valid

This MR fixes issue by bumping `gitlab_git` to newer version. In this version archive created in tmp file and becomes available only when archive operation finished.

Fixes #1394

See merge request !954

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>