delta/gitlab/gitlab-ce.git/lib/banzai, branch fix-api-docs gitlab.com: gitlab-org/gitlab-ce.git Merge branch 'dz-nested-group-improvements-2' into 'master' 2016-12-13T13:04:11+00:00 Sean McGivern sean@mcgivern.me.uk 2016-12-13T13:04:11+00:00 bd219711b99a31025614bf5715b35a140baf50b6 Minor improvements to nested groups code See merge request !8011 

Minor improvements to nested groups code

See merge request !8011
 Merge branch 'unescape-relative-path' into 'master' 2016-12-12T17:15:40+00:00 Gabriel Mazetto gabriel@gitlab.com 2016-12-12T17:15:40+00:00 3445136b9b0b8367b151170509fabe613389a50d Avoid escaping relative links in Markdown twice ## What does this MR do? Avoid escaping relative links in Markdown twice. ## Why was this MR needed? Relative links with special characters (e.g. spaces) were escaped twice. ## What are the relevant issue numbers? closes #25191, #25318 See merge request !7940 

Avoid escaping relative links in Markdown twice

## What does this MR do?

Avoid escaping relative links in Markdown twice.

## Why was this MR needed?

Relative links with special characters (e.g. spaces) were escaped twice.

## What are the relevant issue numbers?

closes #25191, #25318

See merge request !7940
 Avoid escaping relative links in Markdown twice (!7940) 2016-12-12T13:45:08+00:00 winniehell git@winniehell.de 2016-12-06T00:29:43+00:00 17e3d3fde8c9a83f58d797c5f62f36b59eedd870 






Rename Routable.where_paths_in to Routable.where_full_path_in
2016-12-11T08:30:40+00:00

Dmitriy Zaporozhets
dmitriy.zaporozhets@gmail.com

2016-12-09T15:27:11+00:00

3e0b8e000f088c24493e993139f8af1be2e14de1

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>





Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>







Add shorthand support to gitlab markdown references
2016-12-02T21:18:17+00:00

Oswaldo Ferreira
oswluizf@gmail.com

2016-11-02T23:49:13+00:00

f272ee6eba37548cbd8919139d583a71ffdac8dc












remove underscore from user-content id namespace
2016-11-30T21:28:11+00:00

Mike Greiling
mike@pixelcog.com

2016-11-29T19:07:38+00:00

131a04d7962b01daa58b8e5efe3f1359a3e73fe1












add transparent namespace to all user-generated anchors in GitLab flavored markdown
2016-11-30T21:28:10+00:00

Mike Greiling
mike@pixelcog.com

2016-11-21T18:02:19+00:00

ff2026f40ec0bc162dc4281b067ed4716b2ad248












Merge branch 'markdown-xss-fix-option-2.1' into 'security'
2016-11-09T11:26:44+00:00

Douwe Maan
douwe@gitlab.com

2016-11-07T16:27:35+00:00

a14ee68fe4815d2906ece670bcc333303fd3c816

Fix for HackerOne XSS vulnerability in markdown

This is an updated blacklist patch to fix https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2007. No text is removed. Dangerous schemes/protocols and invalid URIs are left intact but not linked.

Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/23153

See merge request !2015

Signed-off-by: Rémy Coutable <remy@rymai.me>





Fix for HackerOne XSS vulnerability in markdown

This is an updated blacklist patch to fix https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2007. No text is removed. Dangerous schemes/protocols and invalid URIs are left intact but not linked.

Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/23153

See merge request !2015

Signed-off-by: Rémy Coutable <remy@rymai.me>







Merge branch 'issue_23548_dev' into 'master'
2016-11-09T11:25:17+00:00

Douwe Maan
douwe@gitlab.com

2016-11-01T20:18:51+00:00

bf061d0aff091a73611037b811cea2d3380962f4

disable markdown in comments when referencing disabled features

fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/23548

This MR prevents the following references when tool is disabled:

- issues
- snippets
- commits - when repo is disabled
- commit range - when repo is disabled
- milestones

This MR does not prevent references to repository files, since they are just markdown links and don't leak
information.

See merge request !2011

Signed-off-by: Rémy Coutable <remy@rymai.me>





disable markdown in comments when referencing disabled features

fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/23548

This MR prevents the following references when tool is disabled:

- issues
- snippets
- commits - when repo is disabled
- commit range - when repo is disabled
- milestones

This MR does not prevent references to repository files, since they are just markdown links and don't leak
information.

See merge request !2011

Signed-off-by: Rémy Coutable <remy@rymai.me>







Split out markdown cache storage into a separate method
2016-11-04T04:00:14+00:00

Nick Thomas
nick@gitlab.com

2016-11-03T19:17:42+00:00

251a20a30df6321191122f1d332f29757a2fc735