1. 06 2月, 2018 1 次提交
  2. 22 1月, 2018 1 次提交
  3. 17 11月, 2017 2 次提交
  4. 11 10月, 2017 1 次提交
  5. 04 10月, 2017 1 次提交
  6. 06 7月, 2017 1 次提交
  7. 07 6月, 2017 1 次提交
  8. 04 5月, 2017 1 次提交
    • R
      Display slash commands outcome when previewing Markdown · 45e4c665
      Rares Sfirlogea 提交于
      Remove slash commands from Markdown preview and display their outcome next to
      the text field.
      Introduce new "explanation" block to our slash commands DSL.
      Introduce optional "parse_params" block to slash commands DSL that allows to
      process a parameter before it is passed to "explanation" or "command" blocks.
      Pass path for previewing Markdown as "data" attribute instead of setting
      a variable on "window".
      45e4c665
  9. 26 4月, 2017 1 次提交
  10. 26 3月, 2017 1 次提交
  11. 20 3月, 2017 1 次提交
  12. 13 3月, 2017 1 次提交
  13. 08 3月, 2017 1 次提交
  14. 14 2月, 2017 1 次提交
  15. 07 2月, 2017 1 次提交
  16. 01 1月, 2017 2 次提交
  17. 01 12月, 2016 1 次提交
  18. 11 8月, 2016 1 次提交
  19. 02 7月, 2016 1 次提交
  20. 16 6月, 2016 2 次提交
  21. 14 6月, 2016 1 次提交
    • S
      Forbid scripting for wiki files · 1cda245c
      Sean McGivern 提交于
      Wiki files (not pages - files in the repo) are just sent to the browser
      with whatever content-type the mime_types gem assigns to them based on
      their extension. As this is from the same domain as the GitLab
      application, this is an XSS vulnerability.
      
      Set a CSP forbidding all sources for scripting, CSS, XHR, etc. on these
      files.
      1cda245c
  22. 09 6月, 2016 1 次提交
    • T
      Hook up the updated `WikiLinkFilter` to the wiki controllers. · e6b1d166
      Timothy Andrew 提交于
      - Need to pass in a `page_slug` to the filter, so it can rewrite based
        on the current page (all links are rewritten to the level of the app root).
      - The earlier `markdown_preview` endpoint was at the level of the wiki.
        We need to know the current page (for rewriting, as above), so this
        commit moves the endpoint to the level of a wiki page.
      - Fix all tests
      e6b1d166
  23. 03 6月, 2016 2 次提交
  24. 26 5月, 2016 1 次提交
    • Y
      Split Markdown rendering & reference gathering · 86166d28
      Yorick Peterse 提交于
      This splits the Markdown rendering and reference extraction phases into
      two distinct code bases. The reference extraction phase no longer relies
      on the html-pipeline Gem (and any related code) and allows for
      extracting of references from multiple HTML nodes in a single pass. This
      means that if you want to extract user references from 200 comments you
      no longer need to run 200 times N number of queries, instead only a
      handful of queries may be needed.
      86166d28
  25. 29 4月, 2016 1 次提交
  26. 20 4月, 2016 3 次提交
  27. 31 3月, 2016 1 次提交
  28. 20 3月, 2016 1 次提交
  29. 03 10月, 2015 1 次提交
  30. 09 9月, 2015 1 次提交
  31. 02 9月, 2015 1 次提交
  32. 26 8月, 2015 1 次提交
  33. 26 6月, 2015 2 次提交