Read about our upcoming Code of Conduct on this issue

  1. 05 Mar, 2018 1 commit
  2. 26 Feb, 2018 2 commits
  3. 15 Feb, 2018 1 commit
    • Stan Hu's avatar
      Filter secret variable values from logs · f8e5b802c11a
      Stan Hu authored
      Right now Project::VariablesController users the `value` parameter to send the
      secret variable value. `value` is a pretty generic term and could be used in
      other controllers, but for now it's better to err on the side of caution and
      filter this out.
      
      Closes #43313
      f8e5b802c11a
  4. 09 Feb, 2018 1 commit
    • Brett Walker's avatar
      make sure there is a dependency on Gitlab::CurrentSettings is · 69a866b0a7ef
      Brett Walker authored
      This fixes an issue where the Rails autoload system would throw various `Unable to autoload constant` errors (such as `Unable to autoload constant EE::ProjectsHelper`) when using the autoload system (such with `spring` or `reload!` in the rails console.
      
      This error was specifically ocurring in the EE code, however, it's seems reasonable to place the fix in CE as a general innoculation.
      69a866b0a7ef
  5. 26 Jan, 2018 1 commit
  6. 25 Jan, 2018 1 commit
  7. 11 Jan, 2018 2 commits
  8. 21 Dec, 2017 1 commit
  9. 14 Dec, 2017 2 commits
  10. 17 Nov, 2017 1 commit
  11. 06 Oct, 2017 1 commit
    • Toon Claes's avatar
      Create idea of read-only database · a867cd2b92f4
      Toon Claes authored
      In GitLab EE, a GitLab instance can be read-only (e.g. when it's a Geo
      secondary node). But in GitLab CE it also might be useful to have the
      "read-only" idea around. So port it back to GitLab CE.
      
      Also having the principle of read-only in GitLab CE would hopefully
      lead to less errors introduced, doing write operations when there
      aren't allowed for read-only calls.
      
      Closes gitlab-org/gitlab-ce#37534.
      a867cd2b92f4
  12. 04 Oct, 2017 2 commits
  13. 25 Sep, 2017 1 commit
  14. 10 Sep, 2017 1 commit
  15. 31 Aug, 2017 1 commit
    • Stan Hu's avatar
      Filter additional secrets from Rails logs · c4dfe76d30f9
      Stan Hu authored
      Upon inspection of logs, there were a number of fields not filtered. For example:
      
      * authenticity_token: CSRF token
      * rss_token: Used for RSS feeds
      * secret: Used with Projects::UploadController
      
      Rails provides a way to match regexps, so we now filter:
      
      * Any parameter ending with `_token`
      * Any parameter containing `password`
      * Any parameter containing `secret`
      c4dfe76d30f9
  16. 08 Aug, 2017 1 commit
  17. 07 Aug, 2017 1 commit
  18. 04 Aug, 2017 1 commit
  19. 11 Jul, 2017 1 commit
  20. 07 Jul, 2017 2 commits
  21. 06 Jul, 2017 2 commits
  22. 05 Jul, 2017 1 commit
  23. 28 Jun, 2017 1 commit
  24. 21 Jun, 2017 1 commit
    • Phil Hughes's avatar
      Top navigation redesign · 96494cb0603e
      Phil Hughes authored
      Start of the new navigation by redesigning just the top navigation menu.
      This is only shown when a cookie is set.
      
      Part of #32794
      96494cb0603e
  25. 09 Jun, 2017 3 commits
  26. 24 May, 2017 1 commit
  27. 16 May, 2017 1 commit
  28. 15 May, 2017 1 commit
  29. 09 May, 2017 1 commit
  30. 04 May, 2017 2 commits
  31. 28 Apr, 2017 1 commit