spec/lib · 5d8345a53104bccf30c85f013efc9895f40e9bcc · Forest Godfrey / gitlab-ce

authored Jan 08, 2018

Merge branch '41293-fix-command-injection-vulnerability-on-system_hook_push-queue-through-web-hook-10-2' into 'security-10-2'

[10.2] Don't allow line breaks on HTTP headers

See merge request gitlab/gitlabhq!2287

(cherry picked from commit 1e19734413d46346dd46177d056d9c7165602197)

b7664b12 Don't allow line breaks on HTTP headers

641541de

Name	Last commit	Last update
..
api/helpers		Loading commit data...
banzai		Loading commit data...
bitbucket		Loading commit data...
constraints		Loading commit data...
container_registry		Loading commit data...
gitlab		Loading commit data...
google_api		Loading commit data...
json_web_token		Loading commit data...
mattermost		Loading commit data...
microsoft_teams		Loading commit data...
rspec_flaky		Loading commit data...
system_check		Loading commit data...
additional_email_headers_interceptor_spec.rb		Loading commit data...
after_commit_queue_spec.rb		Loading commit data...
disable_email_interceptor_spec.rb		Loading commit data...
event_filter_spec.rb		Loading commit data...
expand_variables_spec.rb		Loading commit data...
extracts_path_spec.rb		Loading commit data...
feature_spec.rb		Loading commit data...
file_size_validator_spec.rb		Loading commit data...
gitlab_spec.rb		Loading commit data...
repository_cache_spec.rb		Loading commit data...
system_check_spec.rb		Loading commit data...