[10.3] Fix RCE via project import mechanism

See merge request gitlab/gitlabhq!2294

(cherry picked from commit dcfec507d6f9ee119d65a832393e7c593af1d3b2)

86d75812 Fix RCE via project import mechanism

Merge branch '41293-fix-command-injection-vulnerability-on-system_hook_push-queue-through-web-hook' into 'security-10-3'

Don't allow line breaks on HTTP headers

See merge request gitlab/gitlabhq!2277

(cherry picked from commit 7fc0a6fc096768a5604d6dd24d7d952e53300c82)

073b8f9c Don't allow line breaks on HTTP headers

[10.3] Migrate `can_push` column from `keys` to `deploy_keys_project`

See merge request gitlab/gitlabhq!2276

(cherry picked from commit f6ca52d31bac350a23938e0aebf717c767b4710c)

1f2bd3c0 Backport to 10.3

check project access on MR create

See merge request gitlab/gitlabhq!2273

(cherry picked from commit 1fe2325d6ef2bced4c5e97b57691c894f38b2834)

43e85f49 check project access on MR create

[10.3] Fix path traversal in gitlab-ci.yml cache:key

See merge request gitlab/gitlabhq!2270

(cherry picked from commit c32d0c6807dfd41d7838a35742e6d0986871b389)

df29094a Fix path traversal in gitlab-ci.yml cache:key

Validate project path in Gitlab import - 10.3 port

See merge request gitlab/gitlabhq!2268

(cherry picked from commit 94c82376d66fc80d46dd2d5eeb5bade408ec6a7e)

2b94a7c2 Validate project path in Gitlab import

Remove order param from the MilestoneFinder

See merge request gitlab/gitlabhq!2259

(cherry picked from commit 14408042e78f2ebc2644f956621b461dbfa3d36d)

155881e7 Remove order param from the MilestoneFinder

[10.3] Fix XSS in issue label dropdown

See merge request gitlab/gitlabhq!2253

(cherry picked from commit 363ffabcebd7bb0d1a2d59ca1a75e4eadb4a4360)

ea1fb0ea Fix XSS in issue label dropdown

[10.3] Fix XSS vulnerability in Pipeline job trace

See merge request gitlab/gitlabhq!2258

(cherry picked from commit 44caa80ed9a2514a74a5eeab10ff51849d64851b)

5f86f3ff Fix XSS vulnerability in Pipeline job trace

Merge branch 'security-10-3-do-not-expose-passwords-or-tokens-in-service-integrations-api' into 'security-10-3'

Filter out sensitive fields from the project services API

See merge request gitlab/gitlabhq!2281

(cherry picked from commit 476f2576444632f2a9a61b4cead9c1077f2c81d7)

2bcbbda0 Filter out sensitive fields from the project services API

[ci skip]

Prepare 10.3.3 release

See merge request gitlab-org/gitlab-ce!16163

Fix 404 error after a user edits an issue description and solves the reCAPTCHA

Closes #41445

See merge request gitlab-org/gitlab-ce!16167

(cherry picked from commit ac35636f)

b8f5a7d5 Fix 404 error after a user edits an issue description and solves the reCAPTCHA

Fix links to old commits in merge request comments

Closes #41492

See merge request gitlab-org/gitlab-ce!16152

(cherry picked from commit cdda83eb)

c1ea4afa Fix links to old commits in merge requests

Gracefully handle orphaned write deploy keys in /internal/post_receive

Closes #41466

See merge request gitlab-org/gitlab-ce!16127

(cherry picked from commit 228f42b5)

36bdf3dc Gracefully handle orphaned write deploy keys in /internal/post_receive

Unmark Gitaly features as OPT_OUT until the gRPC proxy issue is fixed

Closes #38333

See merge request gitlab-org/gitlab-ce!16155

(cherry picked from commit 0ea75205)

7ed28b90 Unmark Gitaly features as OPT_OUT until the gRPC proxy issue is fixed

[ci skip]

Fix migration for removing orphaned issues.moved_to_id values in MySQL and PostgreSQL

Closes #41498

See merge request gitlab-org/gitlab-ce!16141

(cherry picked from commit ff3e9af6)

5cacdc4e Fix migration for removing orphaned issues.moved_to_id values in MySQL
dfdf22c7 Fix PostgreSQL implementation of migration
e97671b8 Simplify implementation and allow for batch updates in MySQL

[ci skip]

Prepare 10.3.1 release

See merge request gitlab-org/gitlab-ce!16134

Resolve #41448

See merge request gitlab-org/gitlab-ce!16124

Fix Error 500s with anonymous clones for a project that has moved

Closes #41457

See merge request gitlab-org/gitlab-ce!16128

(cherry picked from commit a5a0f3f7)

a83c41f6 Fix Error 500s with anonymous clones for a project that has moved
b6c711fd Disable redirect messages for anonymous clones

Don't link LFS-objects multiple times.

Closes #41241

See merge request gitlab-org/gitlab-ce!16006

(cherry picked from commit 6e42fac3)

ac862490 Don't link LFS-objects multiple times.

Reduce cardinality of some of GitLab's Prometheus metrics and fix observed duration reporting.

Closes #41045

See merge request gitlab-org/gitlab-ce!15881

(cherry picked from commit 92e15071)

e391fe1d Reduce cardinality of gitlab_cache_operation_duration_seconds histogram
b02db1f4 Fix gitaly_call_histogram to observe times in seconds correctly
a8ebed60 Make `System.monotonic_time` retun seconds represented by float with microsecond precision
3c545133 Fix tests and formatting
ed715b79 use in_milliseconds rails helper
040167f0 Use seconds where possible, and convert to milliseconds for Influxdb consumption
10af36f0 add missing word to pawel-reduce_cardinality_of_prometheus_metrics.yml

Execute project hooks and services after commit when moving an issue

Closes #41324

See merge request gitlab-org/gitlab-ce!16108

(cherry picked from commit 87dbf984)

16b8297e Execute project hooks and services after commit when moving an issue

Fix cluster enviroment missing

See merge request gitlab-org/gitlab-ce!15973

(cherry picked from commit 888ed309)

9616e70a Allow environment_scope in cluster controllers
8a13ef41 Add environment scope field to cluster forms
56f719f8 Revert save button caption change
dd66c6a2 Use helper for feature check in cluster partials
2b45ae09 Hardcode clusters helper in CE
ecba48bd Inverse the has_multiple_clusters? helper usage

[ci skip]

Fixed diff_worker not compiling correctly

Closes #41182

See merge request gitlab-org/gitlab-ce!15966

(cherry picked from commit baa6438b)

df4fe43d Fixed diff_worker not compiling correctly
a69e7aff changed webpack config

Migrate to Project#empty_repo?

Closes #41326

See merge request gitlab-org/gitlab-ce!16054

(cherry picked from commit e0a27ee4)

338f1eaf Migrate to Project#empty_repo?

Removes changelog entry for !15788

See merge request gitlab-org/gitlab-ce!16091

Reverting https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/15788

See merge request gitlab-org/gitlab-ce!16088