Project 'gitlab-org/gitlab-ce' was moved to 'gitlab-org/gitlab-foss'. Please update any links and bookmarks that may still have the old path.

gitlab

10 years ago

dd9d17a6

Merge branch 'upload-xss-access-control' into 'master' · dd9d17a6

Marin Jankovski authored 10 years ago and

Dmytro Zaporozhets (DZ) committed 10 years ago

Fix note attachments XSS and access control

Replaces the reverted #1528, as proposed in gitlab-org/omnibus-gitlab#434, as discussed with @dzaporozhets and as summarized in #2032.

@marin Could you take a look at the nginx config and apply it to Omnibus once this gets merged?

See merge request !1553

dd9d17a6

History

Merge branch 'upload-xss-access-control' into 'master'

Marin Jankovski authored 10 years ago and

Dmytro Zaporozhets (DZ) committed 10 years ago

Fix note attachments XSS and access control

Replaces the reverted #1528, as proposed in gitlab-org/omnibus-gitlab#434, as discussed with @dzaporozhets and as summarized in #2032.

@marin Could you take a look at the nginx config and apply it to Omnibus once this gets merged?

See merge request !1553

Code owners

Assign users and groups as approvers for specific file changes. Learn more.