Commits · 15a2d004be2f79160752d77f701c0f08e7f96973 · nexedi / gitlab-ce

04 Nov, 2019 3 commits
- Add latest changes from gitlab-org/gitlab@master · 15a2d004
  GitLab Bot authored Nov 04, 2019
  
  15a2d004
- Add latest changes from gitlab-org/gitlab@master · 80ff3642
  GitLab Bot authored Nov 04, 2019
  
  80ff3642
- Add latest changes from gitlab-org/gitlab@master · c39da0df
  GitLab Bot authored Nov 04, 2019
  
  c39da0df
03 Nov, 2019 1 commit
- Add latest changes from gitlab-org/gitlab@master · d4aaea5e
  GitLab Bot authored Nov 03, 2019
  
  d4aaea5e
02 Nov, 2019 2 commits
- Add latest changes from gitlab-org/gitlab@master · 8423ed74
  GitLab Bot authored Nov 02, 2019
  
  8423ed74
- Add latest changes from gitlab-org/gitlab@master · 2af6d2c4
  GitLab Bot authored Nov 02, 2019
  
  2af6d2c4
01 Nov, 2019 8 commits
- Add latest changes from gitlab-org/gitlab@master · 9c406687
  GitLab Bot authored Nov 01, 2019
  
  9c406687
- Add latest changes from gitlab-org/gitlab@master · 77a73903
  GitLab Bot authored Nov 01, 2019
  
  77a73903
- Add latest changes from gitlab-org/gitlab@master · ded8ee5a
  GitLab Bot authored Nov 01, 2019
  
  ded8ee5a
- Add latest changes from gitlab-org/gitlab@master · deed6022
  GitLab Bot authored Nov 01, 2019
  
  deed6022
- Add latest changes from gitlab-org/gitlab@master · f7a13c56
  GitLab Bot authored Nov 01, 2019
  
  f7a13c56
- Add latest changes from gitlab-org/gitlab@master · 9b8d0d89
  GitLab Bot authored Nov 01, 2019
  
  9b8d0d89
- Add latest changes from gitlab-org/gitlab@master · 56d96ad7
  GitLab Bot authored Nov 01, 2019
  
  56d96ad7
- Add latest changes from gitlab-org/gitlab@master · 8078bd18
  GitLab Bot authored Nov 01, 2019
  
  8078bd18
31 Oct, 2019 8 commits
- Add latest changes from gitlab-org/gitlab@master · 8f210aeb
  GitLab Bot authored Oct 31, 2019
  
  8f210aeb
- Add latest changes from gitlab-org/gitlab@master · 996f7009
  GitLab Bot authored Oct 31, 2019
  
  996f7009
- Add latest changes from gitlab-org/gitlab@master · 083d64c6
  GitLab Bot authored Oct 31, 2019
  
  083d64c6
- Add latest changes from gitlab-org/gitlab@master · 0be510a4
  GitLab Bot authored Oct 31, 2019
  
  0be510a4
- Add latest changes from gitlab-org/gitlab@master · 6026bddc
  GitLab Bot authored Oct 31, 2019
  
  6026bddc
- Add latest changes from gitlab-org/gitlab@master · b7c776f9
  GitLab Bot authored Oct 31, 2019
  
  b7c776f9
- Add latest changes from gitlab-org/gitlab@master · 56d78c70
  GitLab Bot authored Oct 31, 2019
  
  56d78c70
- Add latest changes from gitlab-org/gitlab@master · fd0691c6
  GitLab Bot authored Oct 31, 2019
  
  fd0691c6
30 Oct, 2019 6 commits
- Add latest changes from gitlab-org/gitlab@master · 0f0a8be3
  GitLab Bot authored Oct 30, 2019
  
  0f0a8be3
- Add latest changes from gitlab-org/gitlab@master · 3fe9588b
  GitLab Bot authored Oct 30, 2019
  
  3fe9588b
- Merge dev.gitlab.org@master into GitLab.com@master · ad8eea38
  Yorick Peterse authored Oct 30, 2019
  
  ad8eea38
- Add latest changes from gitlab-org/gitlab@master · 228d752f
  GitLab Bot authored Oct 30, 2019
  
  228d752f
- Add latest changes from gitlab-org/gitlab@master · b539ac1d
  GitLab Bot authored Oct 30, 2019
  
  b539ac1d
- Add latest changes from gitlab-org/gitlab@master · 4c016ad0
  GitLab Bot authored Oct 30, 2019
  
  4c016ad0
29 Oct, 2019 12 commits
- Add latest changes from gitlab-org/gitlab@master · cb3e6b9c
  GitLab Bot authored Oct 29, 2019
  
  cb3e6b9c
- Merge branch 'security-ag-hide-private-members-in-project-member-autocomplete' into 'master' · b0f939a7
  GitLab Release Tools Bot authored Oct 29, 2019
```
Hide private members in project member autocomplete

See merge request gitlab/gitlabhq!3212
```
  b0f939a7
- Merge branch 'security-64519-nested-graphql-query-can-cause-denial-of-service' into 'master' · 8d0b026a
  GitLab Release Tools Bot authored Oct 29, 2019
```
Nested GraphQL query with circular relationship can cause Denial of Service

See merge request gitlab/gitlabhq!3360
```
  8d0b026a
- Merge branch 'security-65756-ex-admin-attacker-can-comment-in-internal' into 'master' · 5f35cbdd
  GitLab Release Tools Bot authored Oct 29, 2019
```
Improper access control allows the attacker to comment in internal commit after they are no longer admin

See merge request gitlab/gitlabhq!3372
```
  5f35cbdd
- Improper access control allows the attacker to comment in internal commit... · d40b7902
  Charlie Ablett authored Oct 29, 2019
```
Improper access control allows the attacker to comment in internal commit after they are no longer admin
```
  d40b7902
- Merge branch 'security-2914-labels-visible-despite-no-access-to-issues-repositories' into 'master' · 771f3fb9
  GitLab Release Tools Bot authored Oct 29, 2019
```
Labels visible despite no access to issues & repositories

See merge request gitlab/gitlabhq!3409
```
  771f3fb9
- Merge branch 'security-2920-fix-notes-with-label-cross-reference' into 'master' · c7ee6535
  GitLab Release Tools Bot authored Oct 29, 2019
```
Project path reveals labels from Private project if the issue is moved to public project

See merge request gitlab/gitlabhq!3419
```
  c7ee6535
- Merge branch 'security-developer-transfer-project' into 'master' · 077f2c6c
  GitLab Release Tools Bot authored Oct 29, 2019
```
Require Maintainer permission on group where project is transferred to

See merge request gitlab/gitlabhq!3420
```
  077f2c6c
- Merge branch 'security-stored-xss-using-find-file' into 'master' · cd284fef
  GitLab Release Tools Bot authored Oct 29, 2019
```
Sanitize search text to prevent XSS

See merge request gitlab/gitlabhq!3453
```
  cd284fef
- Merge branch 'security-remove-leaky-401-responses-master' into 'master' · a7329f43
  GitLab Release Tools Bot authored Oct 29, 2019
```
Private/internal repository enumeration via bruteforce on a vulnerable URL

See merge request gitlab/gitlabhq!3454
```
  a7329f43
- Merge branch 'security-bvl-validate-force-remove-branch-on-mrs-ce' into 'master' · a0043682
  GitLab Release Tools Bot authored Oct 29, 2019
```
Only assign merge params when allowed

See merge request gitlab/gitlabhq!3458
```
  a0043682
- Merge branch 'security-wiki-rdoc-content-ce' into 'master' · af84dec4
  GitLab Release Tools Bot authored Oct 29, 2019
```
Pass all wiki markup formats through our Banzai pipeline filters

See merge request gitlab/gitlabhq!3461
```
  af84dec4