Skip to content
Snippets Groups Projects
  1. Mar 10, 2020
  2. Mar 01, 2020
  3. Feb 14, 2020
  4. Feb 13, 2020
  5. Feb 07, 2020
  6. Feb 05, 2020
  7. Jan 30, 2020
  8. Jan 22, 2020
  9. Jan 15, 2020
  10. Jan 13, 2020
  11. Jan 06, 2020
  12. Dec 16, 2019
  13. Dec 10, 2019
  14. Nov 26, 2019
  15. Nov 07, 2019
  16. Nov 04, 2019
  17. Nov 01, 2019
  18. Oct 30, 2019
  19. Oct 16, 2019
  20. Oct 08, 2019
  21. Oct 04, 2019
  22. Sep 16, 2019
  23. Sep 12, 2019
  24. Sep 09, 2019
  25. Sep 06, 2019
    • Krasimir Angelov's avatar
      Add skeleton Pages internal API · 477ba2b3
      Krasimir Angelov authored
      Basic `/internal/pages` endpoint that will be used for Pages virtual
      domains internal API. The endpoint is currently behind feature flag and
      provides authetication similar to how Workhorse is authenticating with
      the GitLab.
      477ba2b3
  26. Sep 04, 2019
  27. Sep 03, 2019
  28. Aug 27, 2019
  29. Aug 22, 2019
  30. Aug 20, 2019
    • Diego Louzán's avatar
      feat: SMIME signed notification emails · 0dcb9d21
      Diego Louzán authored
      - Add mail interceptor the signs outgoing email with SMIME
      - Add lib and helpers to work with SMIME data
      - New configuration params for setting up SMIME key and cert files
      0dcb9d21
  31. Aug 07, 2019
    • Stan Hu's avatar
      Add support for Content-Security-Policy · 5fbbd3dd
      Stan Hu authored and Ash McKenzie's avatar Ash McKenzie committed
      A nonce-based Content-Security-Policy thwarts XSS attacks by allowing
      inline JavaScript to execute if the script nonce matches the header
      value. Rails 5.2 supports nonce-based Content-Security-Policy headers,
      so provide configuration to enable this and make it work.
      
      To support this, we need to change all `:javascript` HAML filters to the
      following form:
      
      ```
      = javascript_tag nonce: true do
        :plain
          ...
      ```
      
      We use `%script` throughout our HAML to store JSON and other text, but
      since this doesn't execute, browsers don't appear to block this content
      from being used and require the nonce value to be present.
      Unverified
      5fbbd3dd
  32. Aug 01, 2019
  33. Jul 24, 2019
  34. Jul 16, 2019
  35. Jul 09, 2019
  36. Jun 28, 2019
  37. Jun 20, 2019
    • Yorick Peterse's avatar
      Backport gitlab.yml.example from EE · 0e415647
      Yorick Peterse authored
      To make this happen, we need to conditionally add the group_saml
      strategy when running tests, but only on EE. This requires some changes
      to Gitlab.ee? so that it can be used before/without loading the Rails
      environment. We also have to change how we require a few files, so this
      can run outside of Rails.
      Verified
      0e415647
  38. May 29, 2019
    • Jan Provaznik's avatar
      Add Puma sampler · a5adc6a0
      Jan Provaznik authored
      This sampler gathers Puma-specific metrics which can be used by
      Prometheus then.
      a5adc6a0
  39. May 09, 2019
Loading