delta/gitlab/gitlab-ce.git/config/application.rb, branch diff-note

Add request throttles

2017-11-17T08:58:18+00:00

Merge branch 'master' into bvl-group-trees

2017-10-10T15:53:42+00:00

Create idea of read-only database

2017-10-06T20:37:40+00:00

In GitLab EE, a GitLab instance can be read-only (e.g. when it's a Geo
secondary node). But in GitLab CE it also might be useful to have the
"read-only" idea around. So port it back to GitLab CE.

Also having the principle of read-only in GitLab CE would hopefully
lead to less errors introduced, doing write operations when there
aren't allowed for read-only calls.

Closes gitlab-org/gitlab-ce#37534.

Add a `WithPagination` concern to reuse across serializers

2017-10-04T20:46:49+00:00

Load only the currently needed JS locale file

2017-10-04T11:23:52+00:00

Move new nav into main CSS folder

2017-09-25T17:11:42+00:00

Expand filtered parameters to include `token`

2017-09-10T14:05:55+00:00

Now that we are logging API requests in `api_json.log`, we see that
the runner token was not filtered properly.

Filter additional secrets from Rails logs

2017-08-31T04:18:09+00:00

Upon inspection of logs, there were a number of fields not filtered. For example:

* authenticity_token: CSRF token
* rss_token: Used for RSS feeds
* secret: Used with Projects::UploadController

Rails provides a way to match regexps, so we now filter:

* Any parameter ending with `_token`
* Any parameter containing `password`
* Any parameter containing `secret`

Re-enable SqlInjection and CommandInjection

2017-08-08T14:50:54+00:00

Support references to group milestones

2017-08-07T10:55:00+00:00

Group milestones can only be referred to by name, not IID. They also do not
support cross-project references.