spec/lib · a95e10137c3fab082839c4a4f118b4aaffa97288 · Forest Godfrey / gitlab-ce

authored Jan 05, 2018

Merge branch '41293-fix-command-injection-vulnerability-on-system_hook_push-queue-through-web-hook' into 'security-10-3'

Don't allow line breaks on HTTP headers

See merge request gitlab/gitlabhq!2277

(cherry picked from commit 7fc0a6fc096768a5604d6dd24d7d952e53300c82)

073b8f9c Don't allow line breaks on HTTP headers

a95e1013

Name	Last commit	Last update
..
api		Loading commit data...
backup		Loading commit data...
banzai		Loading commit data...
bitbucket		Loading commit data...
constraints		Loading commit data...
container_registry		Loading commit data...
gitlab		Loading commit data...
google_api		Loading commit data...
json_web_token		Loading commit data...
mattermost		Loading commit data...
microsoft_teams		Loading commit data...
rspec_flaky		Loading commit data...
system_check		Loading commit data...
additional_email_headers_interceptor_spec.rb		Loading commit data...
after_commit_queue_spec.rb		Loading commit data...
disable_email_interceptor_spec.rb		Loading commit data...
event_filter_spec.rb		Loading commit data...
expand_variables_spec.rb		Loading commit data...
extracts_path_spec.rb		Loading commit data...
feature_spec.rb		Loading commit data...
file_size_validator_spec.rb		Loading commit data...
gitlab_spec.rb		Loading commit data...
milestone_array_spec.rb		Loading commit data...
repository_cache_spec.rb		Loading commit data...
system_check_spec.rb		Loading commit data...