Skip to content
Snippets Groups Projects
  1. Jan 19, 2021
  2. Jan 13, 2021
  3. Dec 01, 2020
  4. Nov 20, 2020
  5. Oct 23, 2020
  6. Oct 13, 2020
  7. Oct 09, 2020
  8. Oct 07, 2020
  9. Oct 01, 2020
    • Nathan Friend's avatar
      Strip markdown from all og:description meta tags · 5d7d55e4
      Nathan Friend authored and Gabriel Mazetto's avatar Gabriel Mazetto committed
      This commit strips markdown from og:description meta tags by providing
      page_description with the HTML-rendered version of the page's
      description. The end result is that og:description is rendered with a
      plain version of the text, because page_description strips out HTML.
      5d7d55e4
  10. Sep 28, 2020
  11. Sep 17, 2020
  12. Sep 10, 2020
  13. Sep 04, 2020
  14. Sep 02, 2020
  15. Aug 20, 2020
  16. Aug 17, 2020
  17. Jul 24, 2020
    • euko's avatar
      Make issuable_header_warnings shared component · 5ca49bfb
      euko authored and Kushal Pandya's avatar Kushal Pandya committed
      Also added a js class in haml as a render target
      
      Apply suggested patch
      
      Update relevant specs
      
      Add js-lock-issue-data and update mock noteable data
      Test issuable_header_warnings for both mr and issue
      
      Move to vue_shared
      
      Update issuable header warning component
      
      Also update the spec
      
      Apply the suggestions from the second review round
      
      Re-organize the spec
      Remove not needed mock data
      5ca49bfb
  18. Jul 16, 2020
  19. Jul 14, 2020
    • Phil Hughes's avatar
      Added option to view diffs file-by-file · 3a0ab2a9
      Phil Hughes authored
      This adds a user preference to view diffs file-by-file instead
      of viewing all the diff files in one big list.
      This helps with performance on large merge request,
      but it can also be handy sometimes to view merge requests
      file-by-file instead of in a full list of files.
      
      The option to enable this feature is inside of user prefences.
      For now this is also behind a feature flag so we can roll
      this out safely.
      
      gitlab-org/gitlab#222790
      Verified
      3a0ab2a9
  20. Jun 22, 2020
  21. May 29, 2020
  22. Apr 08, 2020
  23. Mar 17, 2020
  24. Feb 10, 2020
  25. Dec 02, 2019
  26. Nov 26, 2019
  27. Oct 11, 2019
    • -'s avatar
      License-Check approval UI support · 3588e7be
      - authored
      Add missing import
      
      Make tooltip unique
      
      Add support for reports_approval type in UI
      
      Additional UI
      
      - Show report_approval type of approval rules in MR iwdget text
      * Add toolips to report approval types in the approvals section
      * Add tooltip help links from rails view helper
      
      Refactor approver check popover to use in MR widget
      
      * Decouple from project list vue component
      
      * Refactor approver check component and decouple it from
      
      Add tooltips to MR approvals widget
      
      Add path helper for approval rules docs
      
      Run prettier, linter, add changelog
      
      Update Pot file and fix unit test errors
      
      Add additional unit tests
      
      Fix haml linter errors
      
      Tweak tooltip layout
      
      Update approval_check_popover to use config
      
      * Refactor to use config object instead of several computed props
      
      Refactor popover to not use internal _uuid
      
      Run prettier
      3588e7be
  28. Sep 12, 2019
  29. Aug 28, 2019
  30. Aug 07, 2019
    • Stan Hu's avatar
      Add support for Content-Security-Policy · 5fbbd3dd
      Stan Hu authored and Ash McKenzie's avatar Ash McKenzie committed
      A nonce-based Content-Security-Policy thwarts XSS attacks by allowing
      inline JavaScript to execute if the script nonce matches the header
      value. Rails 5.2 supports nonce-based Content-Security-Policy headers,
      so provide configuration to enable this and make it work.
      
      To support this, we need to change all `:javascript` HAML filters to the
      following form:
      
      ```
      = javascript_tag nonce: true do
        :plain
          ...
      ```
      
      We use `%script` throughout our HAML to store JSON and other text, but
      since this doesn't execute, browsers don't appear to block this content
      from being used and require the nonce value to be present.
      Verified
      5fbbd3dd
    • Stan Hu's avatar
      Add support for Content-Security-Policy · be105fe2
      Stan Hu authored and Ash McKenzie's avatar Ash McKenzie committed
      A nonce-based Content-Security-Policy thwarts XSS attacks by allowing
      inline JavaScript to execute if the script nonce matches the header
      value. Rails 5.2 supports nonce-based Content-Security-Policy headers,
      so provide configuration to enable this and make it work.
      
      To support this, we need to change all `:javascript` HAML filters to the
      following form:
      
      ```
      = javascript_tag nonce: true do
        :plain
          ...
      ```
      
      We use `%script` throughout our HAML to store JSON and other text, but
      since this doesn't execute, browsers don't appear to block this content
      from being used and require the nonce value to be present.
      Verified
      be105fe2
  31. Jul 27, 2019
  32. Jul 26, 2019
  33. Jun 20, 2019
    • Stan Hu's avatar
      Omit issues links in merge request entity API response · 1b7ab11f
      Stan Hu authored
      The merge request widget has a section that includes which issues may be
      closed or mentioned based on the merge request description. The problem
      is that rendering and redacting Markdown can be expensive, especially
      since the browser polls for the data every 10 seconds.
      
      Since these links don't change much and are just nice to have, we only
      load them on first page load. The frontend will use the existing data if
      the data doesn't appear on subsequent requests.
      
      This saves about 30% of the rendering time of this endpoint, which adds
      up to significant savings considering that
      `MergeRequestsController#show.json` is called over a million times a day
      on GitLab.com.
      
      Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/63546
      1b7ab11f
  34. Jun 14, 2019
  35. Jun 06, 2019
  36. Apr 25, 2019
Loading