Fix open redirect vulnerability

See merge request gitlab-org/security/gitlab!2540

Merge branch 'security-fix-open-redirect-vulnerability-14-10' into '14-10-stable-ee'

See merge request gitlab-org/security/gitlab!2540

Changelog: security

Adds a filter based on user access to Runner jobs endpoint

See merge request gitlab-org/security/gitlab!2497

Merge branch 'security-list-runner-jobs-14-10' into '14-10-stable-ee'

See merge request gitlab-org/security/gitlab!2497

Changelog: security

Prevent runners from picking IP restricted jobs

See merge request gitlab-org/security/gitlab!2503

Merge branch 'security-682-jobs-with-restricted-ip-addresses-14-10' into '14-10-stable-ee'

See merge request gitlab-org/security/gitlab!2503

Changelog: security

Restrict CI lint access to pipeline creators

See merge request gitlab-org/security/gitlab!2515

Merge branch 'security-aw-355738-restrict-ci-config-access-14-10' into '14-10-stable-ee'

See merge request gitlab-org/security/gitlab!2515

Changelog: security

Catch endless headers when reading HTTP responses

See merge request gitlab-org/security/gitlab!2529

Merge branch 'security-fix-http-endless-headers-dos-14-10' into '14-10-stable-ee'

See merge request gitlab-org/security/gitlab!2529

Changelog: security

Remove JWT deprecation announcement in 14.10

See merge request gitlab-org/gitlab!89492

[merge-train skip]

[ci skip]

[ci skip]

Fix IP restrictions not applying to deploy tokens

See merge request gitlab-org/security/gitlab!2471

Merge branch 'security-security/sh-deploy-token-ip-fix-14-10' into '14-10-stable-ee'

See merge request gitlab-org/security/gitlab!2471

Changelog: security

Trigger token should respect group IP restrictions

See merge request gitlab-org/security/gitlab!2478

Merge branch 'security-security_trigger_ip_restrictions-14-10' into '14-10-stable-ee'

See merge request gitlab-org/security/gitlab!2478

Changelog: security

Fix content injection in Jira issue title

See merge request gitlab-org/security/gitlab!2464

Merge branch 'security-674-fix-jira-content-injection-14-10' into '14-10-stable-ee'

See merge request gitlab-org/security/gitlab!2464

Changelog: security

Subgroup member can list members of parent group

See merge request gitlab-org/security/gitlab!2480

Merge branch 'security-subgroup-member-list-parent-group-member-14-10' into '14-10-stable-ee'

See merge request gitlab-org/security/gitlab!2480

Changelog: security

Do not allow project member import when membership is locked

See merge request gitlab-org/security/gitlab!2447

Merge branch 'security-project-import-members-fix-14-10' into '14-10-stable-ee'

See merge request gitlab-org/security/gitlab!2447

Changelog: security

Disable changing user attributes when updating SCIM provisioned user

See merge request gitlab-org/security/gitlab!2454

Merge branch 'security-disable_user_updates_in_scim_patch_api-14-10' into '14-10-stable-ee'

See merge request gitlab-org/security/gitlab!2454

Changelog: security

Allow only job owner to run interactive terminal

See merge request gitlab-org/security/gitlab!2433

Merge branch 'security-only-job-owner-runs-terminal-14-10' into '14-10-stable-ee'

See merge request gitlab-org/security/gitlab!2433

Changelog: security

[merge-train skip]

[ci skip]

[ci skip]

Prepare 14.10.3-ee release (2nd preparation MR)

See merge request gitlab-org/gitlab!88013

Backport: Add option to disable seperated caches

See merge request gitlab-org/gitlab!88016

Changelog: added
Issue: https://gitlab.com/gitlab-org/gitlab/-/issues/361643

Prepare 14.10.3-ee release

See merge request gitlab-org/gitlab!87729

See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/87164

Changelog: fixed

Add Git SSH / Shell limits

See merge request gitlab-org/gitlab!87088

(cherry picked from commit a7e74bf2b7f1417cf9bb4e78689a360c433ecc49)

b4297993 Adds git ssh section
223efd66 Apply 2 suggestion(s) to 1 file(s)
59f14866 Apply 1 suggestion(s) to 1 file(s)