Skip to content
Snippets Groups Projects
  1. Sep 13, 2019
  2. Aug 20, 2019
  3. Aug 01, 2019
  4. Mar 09, 2019
  5. Oct 18, 2018
  6. Sep 19, 2018
    • gfyoung's avatar
      Enable frozen string in app/controllers/**/*.rb · 73322a0e
      gfyoung authored
      Enables frozen string for the following:
      
      * app/controllers/*.rb
      * app/controllers/admin/**/*.rb
      * app/controllers/boards/**/*.rb
      * app/controllers/ci/**/*.rb
      * app/controllers/concerns/**/*.rb
      
      Partially addresses #47424.
      73322a0e
  7. Aug 20, 2018
    • Yorick Peterse's avatar
      Refactor AutocompleteController · 6f3c4901
      Yorick Peterse authored
      This refactors the AutocompleteController according to the guidelines
      and boundaries discussed in
      https://gitlab.com/gitlab-org/gitlab-ce/issues/49653. Specifically,
      ActiveRecord logic is moved to different finders, which are then used in
      the controller. View logic in turn is moved to presenters, instead of
      directly using ActiveRecord's "to_json" method.
      
      The finder MoveToProjectFinder is also adjusted according to the
      abstraction guidelines and boundaries, resulting in a much more simple
      finder.
      
      By using finders (and other abstractions) more actively, we can push a
      lot of logic out of the controller. We also remove the need for various
      "before_action" hooks, though this could be achieved without using
      finders as well.
      
      The various finders related to AutcompleteController have also been
      moved into a namespace. This removes the need for calling everything
      "AutocompleteSmurfFinder", instead you can use
      "Autocomplete::SmurfFinder".
      Verified
      6f3c4901
  8. Dec 19, 2017
  9. Nov 16, 2017
  10. Sep 10, 2017
  11. Sep 04, 2017
  12. Aug 30, 2017
  13. Jul 14, 2017
  14. Jun 08, 2017
    • DJ Mountney's avatar
      Merge branch 'dz-restrict-autocomplete' into 'security-9-1' · 982368dc
      DJ Mountney authored
      Allow users autocomplete by author_id only for authenticated users
      
      See merge request !2100
      982368dc
    • DJ Mountney's avatar
      Bring in security changes from the 9.2.5 release · 565ead61
      DJ Mountney authored and Bob Van Landuyt :neckbeard:'s avatar Bob Van Landuyt :neckbeard: committed
      Ran:
       - git format-patch v9.2.2..v9.2.5 --stdout > patchfile.patch
       - git checkout -b 9-2-5-security-patch origin/v9.2.2
       - git apply patchfile.patch
       - git commit
       - [Got the sha ref for the commit]
       - git checkout -b upstream-9-2-security master
       - git cherry-pick <SHA of the patchfile commit>
       - [Resolved conflicts]
       - git cherry-pick --continue
      565ead61
    • DJ Mountney's avatar
      Bring in security changes from the 9.2.5 release · 1d1363e2
      DJ Mountney authored
      Ran:
       - git format-patch v9.2.2..v9.2.5 --stdout > patchfile.patch
       - git checkout -b 9-2-5-security-patch origin/v9.2.2
       - git apply patchfile.patch
       - git commit
       - [Got the sha ref for the commit]
       - git checkout -b upstream-9-2-security master
       - git cherry-pick <SHA of the patchfile commit>
       - [Resolved conflicts]
       - git cherry-pick --continue
      1d1363e2
  15. May 26, 2017
  16. May 10, 2017
  17. Mar 10, 2017
    • Sean McGivern's avatar
      Fix autocomplete in EE when permissions are sent · 5c0f6c85
      Sean McGivern authored
      In EE, `@users` can be an array at the point where we remove the current
      user, because it can do a permissions check on the users for project
      mirroring.
      
      Fix this in CE by only using array methods, not AR methods. We can't use
      `delete` because that uses `Object#equal?`, which isn't true in this
      case.
      5c0f6c85
  18. Jan 27, 2017
    • Sean McGivern's avatar
      Don't call `#uniq` on a relation · 2c40a012
      Sean McGivern authored
      When there was no project, no search, and no current user or author
      param, the AutocompleteController would call `#uniq!` on a relation
      instead of an array. This performed the less-efficient `SELECT DISTINCT`
      when it wasn't even needed (because the query wouldn't return duplicates
      anyway - duplicates were only added by putting a user on top of the
      list).
      2c40a012
  19. Jan 17, 2017
  20. Nov 30, 2016
  21. Nov 18, 2016
  22. Nov 17, 2016
  23. Nov 04, 2016
  24. Aug 17, 2016
  25. Aug 16, 2016
  26. Jul 27, 2016
    • Sean McGivern's avatar
      Allow skipping users in autocomplete · dc4de2d8
      Sean McGivern authored
      Pass an array of user IDs in the `skip_users` param to have them
      excluded from the results (unless they are explicitly included through
      the `current_user` or `author_id` params).
      dc4de2d8
  27. Jun 16, 2016
  28. Jun 15, 2016
  29. Jun 03, 2016
  30. May 25, 2016
  31. May 20, 2016
Loading