1. 14 Nov, 2019 1 commit
  2. 13 Nov, 2019 3 commits
  3. 11 Nov, 2019 1 commit
  4. 08 Nov, 2019 3 commits
  5. 07 Nov, 2019 2 commits
  6. 06 Nov, 2019 1 commit
  7. 04 Nov, 2019 1 commit
  8. 01 Nov, 2019 2 commits
  9. 31 Oct, 2019 2 commits
  10. 30 Oct, 2019 1 commit
  11. 29 Oct, 2019 1 commit
  12. 28 Oct, 2019 1 commit
  13. 26 Oct, 2019 1 commit
  14. 23 Oct, 2019 2 commits
  15. 22 Oct, 2019 1 commit
  16. 21 Oct, 2019 2 commits
  17. 18 Oct, 2019 1 commit
  18. 17 Oct, 2019 2 commits
  19. 16 Oct, 2019 3 commits
  20. 14 Oct, 2019 1 commit
  21. 10 Oct, 2019 2 commits
  22. 09 Oct, 2019 2 commits
    • GitLab Bot's avatar
      Add latest changes from gitlab-org/gitlab@master · da94c16ec383
      GitLab Bot authored
      da94c16ec383
    • Kerri Miller's avatar
      Avoid #authenticate_user! in #route_not_found · 41a198bb1714
      Kerri Miller authored
      This method, #route_not_found, is executed as the final fallback for
      unrecognized routes (as the name might imply.) We want to avoid
      `#authenticate_user!` when calling `#route_not_found`;
      `#authenticate_user!` can, depending on the request format, return a 401
      instead of redirecting to a login page. This opens a subtle security
      exploit where anonymous users will receive a 401 response when
      attempting to access a private repo, while a recognized user will
      receive a 404, exposing the existence of the private, hidden repo.
      41a198bb1714
  23. 08 Oct, 2019 2 commits
  24. 04 Oct, 2019 1 commit
  25. 03 Oct, 2019 1 commit