Commit Graph

92 Commits

Author SHA1 Message Date
GitLab Bot 7f73b108d4 Add latest changes from gitlab-org/gitlab@master 2023-09-14 12:09:48 +00:00
GitLab Bot 1bbd0179d7 Add latest changes from gitlab-org/gitlab@master 2023-06-29 18:10:36 +00:00
GitLab Bot 9933e246c8 Add latest changes from gitlab-org/gitlab@master 2023-05-24 06:07:33 +00:00
GitLab Bot b161512b30 Add latest changes from gitlab-org/gitlab@master 2023-04-06 12:08:07 +00:00
GitLab Bot 46f49bc8e6 Add latest changes from gitlab-org/gitlab@master 2023-03-31 00:12:17 +00:00
GitLab Bot 9d4e1c4614 Add latest changes from gitlab-org/gitlab@master 2023-03-16 00:08:20 +00:00
GitLab Bot 7b7bc31c5b Add latest changes from gitlab-org/gitlab@master 2023-03-13 18:08:56 +00:00
GitLab Bot ce545ca5d7 Add latest changes from gitlab-org/gitlab@master 2023-01-25 00:11:15 +00:00
GitLab Bot 4a6dacc866 Add latest changes from gitlab-org/gitlab@master 2023-01-10 03:07:25 +00:00
GitLab Bot ba557e8fea Add latest changes from gitlab-org/gitlab@master 2022-12-01 00:07:13 +00:00
GitLab Bot 3a25b40d55 Add latest changes from gitlab-org/gitlab@master 2022-11-28 15:09:27 +00:00
GitLab Bot e20fed01c8 Add latest changes from gitlab-org/gitlab@master 2022-11-24 18:10:28 +00:00
GitLab Bot 18869e31e6 Add latest changes from gitlab-org/gitlab@master 2022-11-22 21:10:22 +00:00
GitLab Bot ec890a64f7 Add latest changes from gitlab-org/gitlab@master 2022-11-10 06:10:52 +00:00
GitLab Bot 71d6b9014b Add latest changes from gitlab-org/gitlab@master 2022-10-28 21:10:45 +00:00
GitLab Bot 559b1da28e Add latest changes from gitlab-org/gitlab@master 2022-10-21 12:11:29 +00:00
GitLab Bot 40e8ba2fc8 Add latest changes from gitlab-org/gitlab@master 2022-10-20 21:09:04 +00:00
GitLab Bot 7bbc9509dc Add latest changes from gitlab-org/gitlab@master 2022-10-18 09:11:01 +00:00
GitLab Bot 5150ecc452 Add latest changes from gitlab-org/gitlab@master 2022-10-17 18:09:13 +00:00
GitLab Bot 0cd52ae4af Add latest changes from gitlab-org/gitlab@master 2022-10-13 00:08:53 +00:00
GitLab Bot faa19db44a Add latest changes from gitlab-org/gitlab@master 2022-08-01 15:11:13 +00:00
GitLab Bot c25c2a508b Add latest changes from gitlab-org/gitlab@master 2022-07-22 18:08:56 +00:00
GitLab Bot 9c8e8b5ffc Add latest changes from gitlab-org/gitlab@master 2022-07-19 15:09:10 +00:00
GitLab Bot b302502690 Add latest changes from gitlab-org/gitlab@master 2022-07-15 18:09:50 +00:00
GitLab Bot b7b44de429 Add latest changes from gitlab-org/gitlab@master 2022-06-16 09:09:15 +00:00
GitLab Bot 6ae4485274 Add latest changes from gitlab-org/gitlab@master 2022-06-10 21:09:35 +00:00
GitLab Bot 9a4d2a38dc Add latest changes from gitlab-org/gitlab@master 2022-06-07 21:09:00 +00:00
GitLab Bot 6728ed6fe2 Add latest changes from gitlab-org/gitlab@master 2022-03-08 12:20:17 +00:00
GitLab Bot 8858979899 Add latest changes from gitlab-org/gitlab@master 2022-02-16 06:12:24 +00:00
GitLab Bot f31ef3fd55 Add latest changes from gitlab-org/gitlab@master 2022-01-11 06:10:58 +00:00
GitLab Bot 79a7da2537 Add latest changes from gitlab-org/gitlab@master 2021-12-14 12:13:33 +00:00
GitLab Bot 6a6824a5ce Add latest changes from gitlab-org/gitlab@master 2021-09-10 15:11:12 +00:00
GitLab Bot 1d9f78b3a4 Add latest changes from gitlab-org/gitlab@master 2021-07-28 15:09:57 +00:00
GitLab Bot d6ae5ba9df Add latest changes from gitlab-org/gitlab@master 2021-05-31 06:10:40 +00:00
GitLab Bot 42d323de78 Add latest changes from gitlab-org/gitlab@master 2021-05-21 15:10:51 +00:00
GitLab Bot a32e60a7ea Add latest changes from gitlab-org/gitlab@master 2021-05-20 12:10:26 +00:00
GitLab Bot c19bb4adbf Add latest changes from gitlab-org/gitlab@master 2021-05-14 09:10:24 +00:00
GitLab Bot 454973238c Add latest changes from gitlab-org/gitlab@master 2021-05-06 21:10:07 +00:00
GitLab Bot 13867d66e9 Add latest changes from gitlab-org/gitlab@master 2019-12-16 09:08:10 +00:00
GitLab Bot 238d22c072 Add latest changes from gitlab-org/gitlab@master 2019-10-17 15:06:17 +00:00
George Koltsov 8abf920d1f Refactor SystemHookUrlValidator and specs
Simplify SystemHookUrlValidator to inherit from PublicUrlValidator
Refactor specs to move out shared examples to be used in both
system hooks and public url validators.
2019-08-02 15:39:18 +01:00
George Koltsov e5e1c907c0 Add outbound requests setting for system hooks
This MR adds new application setting to network section
`allow_local_requests_from_system_hooks`. Prior to this change
system hooks were allowed to do local network requests by default
and we are adding an ability for admins to control it.
2019-08-02 15:39:18 +01:00
Nick Thomas 013f7cd24c
Inherit from ApplicationRecord instead of ActiveRecord::Base 2019-03-28 16:18:23 +00:00
Nick Thomas 2f2b0ad390
Use a 32-byte version of db_key_base for web hooks
AES-256-GCM cipher mode requires a key that is exactly 32 bytes long.
We already handle the case when the key is too long, by truncating, but
the key can also be too short in some installations. Switching to a key
that is always exactly the right length (by virtue of right-padding
ASCII 0 characters) allows encryption to proceed, without breaking
backward compatibility.

When the key is too short, encryption fails with an `ArgumentError`,
causing the web hooks functionality to be unusable. As a result, zero
rows can exist with values encrypted with the too-short key.

When the key is too long, it is silently truncated. In this case, the
key is unchanged, so values encrypted with the new too-long key will
still be successfully decrypted.
2018-12-05 00:00:42 +00:00
Nick Thomas ff9881d991
Remove unencrypted webhook token and URL columns 2018-10-09 11:15:02 +01:00
Nick Thomas fb48eaba46
Encrypt webhook tokens and URLs in the database 2018-10-01 15:33:36 +01:00
Yorick Peterse 2039c8280d
Disable existing offenses for the CodeReuse cops
This whitelists all existing offenses for the various CodeReuse cops, of
which most are triggered by the CodeReuse/ActiveRecord cop.
2018-09-11 17:32:00 +02:00
Duana Saskia ece6a1ea6e Filter project hooks by branch
Allow specificying a branch filter for a project hook and only trigger
a project hook if either the branch filter is blank or the branch matches.
Only supported for push_events for now.
2018-08-13 13:20:58 +02:00
gfyoung 15b878e27e Enable more frozen string in app/models/**/*.rb
Partially addresses #47424.
2018-08-07 00:37:36 -07:00
Francisco Javier López 840f80d48b Add validation to webhook and service URLs to ensure they are not blocked because of SSRF 2018-06-01 11:43:53 +00:00