Commit Graph

92 Commits

Author SHA1 Message Date
Marcel Amirault 70a16ebc97 Realign 3 docs that diverged between ce/ee 2019-09-02 02:35:06 +00:00
Robert Speicher 7698d40550
Merge branch 'master' of dev.gitlab.org:gitlab/gitlabhq 2019-08-29 17:17:37 -05:00
Marcel Amirault 1e2f46f864 Fix capitalization in more docs
Fix capitalization in docs for works like GitLab, Git
Omnibus, etc
2019-08-29 08:50:59 +00:00
Evan Read 46f7674733 Edit limit text 2019-08-28 15:57:20 +10:00
Evan Read fb27656529 Merge branch 'mk/remove-jwt-from-rate-limit-docs' into 'master'
Note CI token exception to JWT requests in rate limit docs

See merge request gitlab-org/gitlab-ce!32168
2019-08-28 05:50:35 +00:00
Achilleas Pipinellis 840540e33b Merge branch 'docs-password-storage' into 'master'
Document how GitLab stores passwords

See merge request gitlab-org/gitlab-ce!32077
2019-08-26 19:19:23 +00:00
Brett Walker ad05e48863 Add support for using a Camo proxy server
User images and videos will get proxied through
the Camo server in order to keep malicious
sites from collecting the IP address of users.
2019-08-23 23:44:53 -05:00
Michael Kozono 8af8da09d0
Note some JWT requests aren't rate limited 2019-08-23 12:52:53 -07:00
Christiaan Conover a6d04d4869 Improve readability of salting description
Add a comma in the final sentence of the description of salting, to
improve the readability of what's being said.
2019-08-22 12:07:19 -04:00
Christiaan Conover 2ed065885c Fix a typo in the section on stretching
Correct a typo in the description of how passwords are stretched.
2019-08-22 12:02:31 -04:00
Marcel Amirault d2cb8f785e Update docs to pass new markdownlint
Deletes extra spaces and line, makes lists consistent, and
fixes links.
2019-08-22 08:50:31 +00:00
Christiaan Conover b316fb6fd7 Fix link syntax typo
Fix a missing parentheses in the markdown for a link caused by the URL
containing parentheses.
2019-08-21 18:01:13 -04:00
Christiaan Conover 954c3c1832 Document how GitLab stores passwords
Provide details on how GitLab stores passwords, including hashing,
stretching, and salting. This was driven by a customer asking for this
information for a security compliance audit report.
2019-08-21 17:49:04 -04:00
Mayra Cabrera b57d399212 Add docs for rate limiter on raw endpoints
The section was included on security/raw_limits and on the admin area
settings.

Related to https://gitlab.com/gitlab-org/gitlab-ce/issues/48717
2019-08-16 12:20:17 +00:00
Reuben Pereira 409126c891 Add docs for local requests whitelist
- Add documentation under security/webhooks since similar docs are
present there.
2019-08-08 16:54:52 +00:00
Achilleas Pipinellis 95145f3e3e Compress images with pngquant 2019-08-07 10:01:48 +00:00
Russell Dickenson 0eafd744d5 Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/65499 2019-08-07 08:44:23 +00:00
George Koltsov 8abf920d1f Refactor SystemHookUrlValidator and specs
Simplify SystemHookUrlValidator to inherit from PublicUrlValidator
Refactor specs to move out shared examples to be used in both
system hooks and public url validators.
2019-08-02 15:39:18 +01:00
George Koltsov ac7661924e Update security/webhooks.md doc page & specs
Updating security/webhooks.md to match new behaviour
as well as drying up few specs to extract shared
examples
2019-08-02 15:39:18 +01:00
Michael Kozono 7cfbeaac50 Add rate limit docs 2019-08-02 02:41:52 +00:00
astrachan e204554057 Update root default email address to current value 2019-07-19 12:15:23 +10:00
Achilleas Pipinellis 698864df12 Clean-up some confusing info from security docs 2019-07-16 07:02:20 +00:00
Marcel Amirault 74a8d30090 Fix whitespace in user, and misc, docs
Many code blocks are 4spaced, and they render in GitLab
without coloring as a result, even though they are
fenced with a language label. If in a list, other items
woll render as being in a code block too, even if not
meant to. This fixes all these issues, and cleans up
minor whitespace issues in /user, /security, /ssh
and /migrate_ci_to_ce docs.
2019-07-15 03:02:30 +00:00
Marcel Amirault 4121c63676 Remove extra blank lines from docs
Removing extra blank lines in docs that serve
no purpose, as well as some --- lines that also
are not needed.
2019-07-15 01:04:35 +00:00
Marcel Amirault 3ee846c9db Remove trailing whitespace in docs
Remove unneeded trailing whitespace in lines in
/security /workflow /user docs
2019-07-15 00:46:34 +00:00
Stan Hu 82c31a9add Support CIDR notation in IP rate limiter
This will make it possible to whitelist multiple IP addresses
(e.g. 192.168.0.1/24).
2019-06-27 23:16:11 -07:00
Roger Meier 35d928c4a9 refactor: apply "require 2FA" to all subgroup and ancestor group members, when changing 2019-06-13 08:43:14 +02:00
Mike Lewis 58d520084c Update links in information_exclusivity.md 2019-06-09 19:55:42 +00:00
Matt Penna 666ee9f19b Corrected links to use absolute path names 2019-06-07 16:56:54 -04:00
Matt Penna fc87880c96 Added links to pertinent GitLab docs
Clarified who can push to a protected branch
2019-06-07 16:56:40 -04:00
Matt Penna be1d1c7043 Apply suggestion to doc/security/webhooks.md 2019-06-07 19:27:48 +00:00
Matt Penna 6fb7ced579 Apply suggestion to doc/security/rack_attack.md 2019-06-07 19:27:27 +00:00
Matt Penna 7d4cf82ee3 Updated security docs
Changes include:

- Added front matter

- Added Troubleshooting header

- Shorted long lines

- Corrected typos and improved clarity throughout
2019-06-07 12:39:22 -04:00
Matt Penna bf92601093 Various edits to security documentation
Edits to conform with CE epic 1280 SSOT standards, other improvements
2019-06-07 12:38:35 -04:00
Achilleas Pipinellis fc925583da Add type to frontmatter 2019-06-07 13:55:22 +00:00
Evan Read d650c30837 Clarify and improve 2FA configuration information 2019-06-05 19:20:26 +00:00
Mayra Cabrera ed8ebc635a Changes RackAttack logger to use structured logs
Creates a new filename to register auth logs.
This change should allow SRE's queries to make better queries
through logging infrastructure.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/54528
2019-05-24 00:45:02 +00:00
Tristan Williams 5829bf8578 Docs: add details about restricted SSH keys 2019-02-22 16:55:43 +00:00
Marcel Amirault e145e15f23 Docs: Misc small fixes to docs 2019-02-12 12:45:20 +00:00
Evan Read c2c2d04b3a Fix most instances of bare URLs in markdown 2019-01-24 06:52:33 +00:00
Rémy Coutable 787d9c47e7 Merge branch 'patch-31' into 'master'
GitLab 11.4.3 "Outbound requests" setting path

See merge request gitlab-org/gitlab-ce!22898
2019-01-14 17:24:11 +00:00
Evan Read d98560c1f5 Make unordered lists conform to styleguide
- Also makes other minor Markdown fixes that were near the main fixes.
2019-01-08 12:21:09 +10:00
Matt Rice 36426fe578 Update doc/security/rack-attack.md 2018-12-11 16:49:47 +00:00
Salman Mohammadi 75dc0c6cc2 fix: update the link to the new address.
this change eliminates the need to redirect the page.
2018-12-04 00:01:47 +00:00
Illan RUL-DA CUNHA 3dbf83fe46 Precisions about the times specified in gitlab.rb for Rack Attack 2018-11-20 16:44:15 +00:00
Evan Read 20146580a0 Resolve Markdown ordered lists not conforming to styleguide 2018-11-13 10:53:38 +10:00
Thunk 744759e404 GitLab 11.4.3 "Outbound requests" setting path 2018-11-08 07:04:57 +00:00
Marcel Amirault fd7358a8cd Correct Gitlab to GitLab in docs 2018-09-25 04:57:57 +00:00
Marcel Amirault 109cfd951d
Correct grammar (setup to set-up) in Docs 2018-09-21 16:29:14 +02:00
Yannick Binnenweg 735da8dde7
Fix minor error in doc/security/user_email_confirmation.md
Originally submitted at
https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/3190.

Signed-off-by: Rémy Coutable <remy@rymai.me>
2018-08-29 17:35:41 +02:00