Signed-off-by: Ashley Dumaine <adumaine@datto.com>

See https://gitlab.com/gitlab-org/gitlab-ce/issues/42928

Closes #42800.

See https://gitlab.com/gitlab-org/gitlab-ce/issues/43198

Constructors shouldn't throw exceptions. We also learned that
different LDAP servers behave a bit unexpectedly sometimes -
returning attributes we didn't ask for, or returned attributes
with language subtypes.

Closes #26466.

As per the discussion with @psimyn, this change does not affect the frontend, so user input will not be validated on the signin screen.

Instead, the value sent to the backend has leading and trailing whitespace stripped before looking up the user with find_by.

Closes #42637

This reverts commit a58f8c32, reversing
changes made to cd5d75c3.

Fix using wildcards in protected tags to expose protected variables

James Lopez authored 7 years ago and Robert Speicher committed 7 years ago

[10.4] Fix GH namespace security issue

Restrict Todo API mark_as_done endpoint to the user's todos only

[10.4] Fix stored XSS in code blocks

Adds CSS for child envrionments