1. 10 Dec, 2015 7 commits
    • Douwe Maan's avatar
      Merge branch 'master' into tmp-reference-pipeline-and-caching · 10387f6b
      Douwe Maan authored
      # Conflicts:
      #	spec/lib/gitlab/markdown/autolink_filter_spec.rb
      #	spec/lib/gitlab/markdown/commit_range_reference_filter_spec.rb
      #	spec/lib/gitlab/markdown/commit_reference_filter_spec.rb
      #	spec/lib/gitlab/markdown/cross_project_reference_spec.rb
      #	spec/lib/gitlab/markdown/emoji_filter_spec.rb
      #	spec/lib/gitlab/markdown/external_issue_reference_filter_spec.rb
      #	spec/lib/gitlab/markdown/external_link_filter_spec.rb
      #	spec/lib/gitlab/markdown/issue_reference_filter_spec.rb
      #	spec/lib/gitlab/markdown/label_reference_filter_spec.rb
      #	spec/lib/gitlab/markdown/merge_request_reference_filter_spec.rb
      #	spec/lib/gitlab/markdown/redactor_filter_spec.rb
      #	spec/lib/gitlab/markdown/reference_gatherer_filter_spec.rb
      #	spec/lib/gitlab/markdown/relative_link_filter_spec.rb
      #	spec/lib/gitlab/markdown/sanitization_filter_spec.rb
      #	spec/lib/gitlab/markdown/snippet_reference_filter_spec.rb
      #	spec/lib/gitlab/markdown/syntax_highlight_filter_spec.rb
      #	spec/lib/gitlab/markdown/table_of_contents_filter_spec.rb
      #	spec/lib/gitlab/markdown/task_list_filter_spec.rb
      #	spec/lib/gitlab/markdown/upload_link_filter_spec.rb
      #	spec/lib/gitlab/markdown/user_reference_filter_spec.rb
      10387f6b
    • Kamil Trzciński's avatar
      Merge branch 'rs-reset-db' into 'master' · bdc62d70
      Kamil Trzciński authored
      Run db:reset before db:create on CI
      
      Should prevent build failures caused by missing migrations, such as
      https://gitlab.com/gitlab-org/gitlab-ce/builds/439927
      
      See merge request !2045
      bdc62d70
    • Robert Speicher's avatar
      Merge branch 'devise_paranoid_mode' into 'master' · ba79d1e5
      Robert Speicher authored
      Enable Devise paranoid mode and ensure the returned message is the same
      every time. This will prevent user enumeration (low impact). 
      
      Prior to this change a user could type an email in the password reset
      field and if the email didn't exist it returned an error. If the email
      was valid it returned a message saying the forgot password link had been
      emailed. After this change the user will receive a message that if the
      email is in our database the reset link will be emailed. 
      
      I also changed the throttle mechanism so it still works the same but
      now returns the exact same message as above. Previously it would say
      'You've already sent a request. Wait a few minutes'. This also allows
      user enumeration, although it requires a double-check.
      
      Related to https://dev.gitlab.org/gitlab/gitlabhq/issues/2624
      
      See merge request !2044
      ba79d1e5
    • Dmitriy Zaporozhets's avatar
      Merge branch 'ui-fix' into 'master' · 19837682
      Dmitriy Zaporozhets authored
      Fix list with controls display
      
      Introduced in !2025
      
      ## Before
      
      ![before](/uploads/969f021f1f97062439cc4e836f29bdf6/before.png)
      
      ## After
      
      ![after](/uploads/defd46ddbd8392625848dfd3ac067869/after.png)
      Signed-off-by: default avatarDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
      
      
      See merge request !2048
      19837682
    • Drew Blessing's avatar
      Use devise paranoid mode and ensure the same message is returned every time · f4ec906e
      Drew Blessing authored
      Skipped CI because it has already passed. Had to rebase due to CHANGELOG.
      f4ec906e
    • Dmitriy Zaporozhets's avatar
      Merge pull request #9897 from atomaka/atomaka/bugfix/consistent-no-ssh-message · 0549b5e8
      Dmitriy Zaporozhets authored
      Fix inconsistency with no ssh key message
      0549b5e8
    • Dmitriy Zaporozhets's avatar
      ab8ab9b1
  2. 09 Dec, 2015 33 commits