BigW Consortium Gitlab
Remove persistent XSS vulnerability in `commit_person_link` helper Because we were incorrectly supplying the tooltip title as `data-original-title` (which Bootstrap's Tooltip JS automatically applies based on the `title` attribute; we should never be setting it directly), the value was being passed through as-is. Instead, we should be supplying the normal `title` attribute and letting Rails escape the value, which also negates the need for us to call `sanitize` on it. Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15126 See merge request !1948
Name |
Last commit
|
Last update |
---|---|---|
.. | ||
appearances_helper.rb | Loading commit data... | |
application_helper.rb | Loading commit data... | |
application_settings_helper.rb | Loading commit data... | |
auth_helper.rb | Loading commit data... | |
blob_helper.rb | Loading commit data... | |
branches_helper.rb | Loading commit data... | |
broadcast_messages_helper.rb | Loading commit data... | |
button_helper.rb | Loading commit data... | |
ci_badge_helper.rb | Loading commit data... | |
ci_status_helper.rb | Loading commit data... | |
commits_helper.rb | Loading commit data... | |
compare_helper.rb | Loading commit data... | |
dashboard_helper.rb | Loading commit data... | |
diff_helper.rb | Loading commit data... | |
dropdowns_helper.rb | Loading commit data... | |
emails_helper.rb | Loading commit data... | |
events_helper.rb | Loading commit data... | |
explore_helper.rb | Loading commit data... | |
external_wiki_helper.rb | Loading commit data... | |
form_helper.rb | Loading commit data... | |
git_helper.rb | Loading commit data... | |
gitlab_markdown_helper.rb | Loading commit data... | |
gitlab_routing_helper.rb | Loading commit data... | |
graph_helper.rb | Loading commit data... | |
groups_helper.rb | Loading commit data... | |
icons_helper.rb | Loading commit data... | |
issuables_helper.rb | Loading commit data... | |
issues_helper.rb | Loading commit data... | |
labels_helper.rb | Loading commit data... | |
merge_requests_helper.rb | Loading commit data... | |
milestones_helper.rb | Loading commit data... | |
namespaces_helper.rb | Loading commit data... | |
nav_helper.rb | Loading commit data... | |
notes_helper.rb | Loading commit data... | |
notifications_helper.rb | Loading commit data... | |
page_layout_helper.rb | Loading commit data... | |
preferences_helper.rb | Loading commit data... | |
projects_helper.rb | Loading commit data... | |
runners_helper.rb | Loading commit data... | |
search_helper.rb | Loading commit data... | |
selects_helper.rb | Loading commit data... | |
snippets_helper.rb | Loading commit data... | |
sorting_helper.rb | Loading commit data... | |
submodule_helper.rb | Loading commit data... | |
tab_helper.rb | Loading commit data... | |
tags_helper.rb | Loading commit data... | |
time_helper.rb | Loading commit data... | |
todos_helper.rb | Loading commit data... | |
tree_helper.rb | Loading commit data... | |
triggers_helper.rb | Loading commit data... | |
version_check_helper.rb | Loading commit data... | |
visibility_level_helper.rb | Loading commit data... |