delta/gitlab/gitlab-ce.git/lib, branch selfmanaged-gitlabcom-import-update-docs gitlab.com: gitlab-org/gitlab-ce.git Merge branch 'master' of dev.gitlab.org:gitlab/gitlabhq 2019-06-03T17:04:57+00:00 Robert Speicher rspeicher@gmail.com 2019-06-03T17:04:57+00:00 a2c767b9f8e22398daa19e62597f2663aadf457d 






Merge branch 'security-60143-address-xss-issue-master' into 'master'
2019-06-03T17:01:25+00:00

Robert Speicher
rspeicher@gmail.com

2019-06-03T17:01:25+00:00

5906fb2e45f352b8fc02f0e98a6148d0c0b2db59

Reject slug+uri concat if slug is deemed unsafe

See merge request gitlab/gitlabhq!3108




Reject slug+uri concat if slug is deemed unsafe

See merge request gitlab/gitlabhq!3108






Merge branch 'security-58856-persistent-xss-in-note-objects' into 'master'
2019-06-03T17:01:10+00:00

Robert Speicher
rspeicher@gmail.com

2019-06-03T17:01:10+00:00

2b13462ac4f091a56c538042712dcf736bb50474

Persistent XSS in note objects CE

See merge request gitlab/gitlabhq!3075




Persistent XSS in note objects CE

See merge request gitlab/gitlabhq!3075






Merge branch 'osw-sync-merge-ref-upon-mergeability-check' into 'master'
2019-06-03T16:29:41+00:00

Douwe Maan
douwe@gitlab.com

2019-06-03T16:29:41+00:00

96ff9c6bd82a6eb60b9f2d1c20fca0105ed4160d

Automatically update MR merge-ref along merge status

Closes #58495

See merge request gitlab-org/gitlab-ce!28513




Automatically update MR merge-ref along merge status

Closes #58495

See merge request gitlab-org/gitlab-ce!28513






Merge dev.gitlab.org master into GitLab.com master
2019-06-03T12:56:33+00:00

Yorick Peterse
yorickpeterse@gmail.com

2019-06-03T12:56:33+00:00

6cb750a2bb7e1720413a7c42ec4afebaa3f2f4d2












Merge branch 'security-fix_milestones_search_api_leak' into 'master'
2019-06-03T12:34:07+00:00

GitLab Release Tools Bot
robert+release-tools@gitlab.com

2019-06-03T12:34:07+00:00

38e4977dc7931aea13f496cafd3ed7d15d5ec93e

Resolve: Milestones leaked via search API

Closes #2822

See merge request gitlab/gitlabhq!2997




Resolve: Milestones leaked via search API

Closes #2822

See merge request gitlab/gitlabhq!2997






Merge branch 'security-60039' into 'master'
2019-06-03T12:34:04+00:00

GitLab Release Tools Bot
robert+release-tools@gitlab.com

2019-06-03T12:34:04+00:00

5dc6c8f2d08534281b0e1adf404af0e8642eb407

Disallow invalid MR branch name

See merge request gitlab/gitlabhq!3052




Disallow invalid MR branch name

See merge request gitlab/gitlabhq!3052






Merge branch 'security-id-leaked-password-in-import-url-frontend' into 'master'
2019-06-03T12:34:01+00:00

GitLab Release Tools Bot
robert+release-tools@gitlab.com

2019-06-03T12:34:01+00:00

e5b88d88fbd3796ba2f56912818231bdfbf0d597

Handling password on import by url page

See merge request gitlab/gitlabhq!3061




Handling password on import by url page

See merge request gitlab/gitlabhq!3061






Merge branch 'dm-http-hostname-override' into 'master'
2019-06-03T12:33:59+00:00

GitLab Release Tools Bot
robert+release-tools@gitlab.com

2019-06-03T12:33:59+00:00

3a7bf68e34b493870146fa026c9a3da1899ef779

Protect Gitlab::HTTP against DNS rebinding attack

See merge request gitlab/gitlabhq!3071




Protect Gitlab::HTTP against DNS rebinding attack

See merge request gitlab/gitlabhq!3071






Merge branch 'security-fix-project-existence-disclosure-master' into 'master'
2019-06-03T12:33:57+00:00

GitLab Release Tools Bot
robert+release-tools@gitlab.com

2019-06-03T12:33:57+00:00

c45c64ce298fab6eca6c54142ab5844a4b2c5c63

Fix url redaction for issue links

See merge request gitlab/gitlabhq!3091




Fix url redaction for issue links

See merge request gitlab/gitlabhq!3091