Daniel Gerhardt authored Apr 21, 2016 and Tom Käsler committed Oct 11, 2019

2FA could be enabled but still was not usedi on sign-in.

Daniel Gerhardt authored Jun 15, 2015 and Tom Käsler committed Oct 11, 2019

The following formerly separate commits have been merged in:

* Adjust 'Sign in' button for GitLab's CSRF protection

  GitLab introduced CSRF protection for authentication requests in
  571ba5a7. The 'Sign in' button has been
  adjusted to send a POST request.

* Opt out of turbolinks for 'Sign in' button

Daniel Gerhardt authored May 04, 2015 and Tom Käsler committed Oct 11, 2019

This restriction does not apply to admins.

Daniel Gerhardt authored Apr 28, 2015 and Tom Käsler committed Oct 11, 2019

This restriction does not apply to admins.

Daniel Gerhardt authored Aug 26, 2015 and Tom Käsler committed Oct 11, 2019

The project variable can hold an object which is not an instance of
Project (e.g. ProjectWiki). In this case, visibility_level is not
defined.

Daniel Gerhardt authored Apr 15, 2015 and Tom Käsler committed Oct 11, 2019

Additionally, the prompt to set a password is no longer shown for CAS
users.

[ci skip]

[ci skip]

Fix private feature Elasticsearch leak

See merge request gitlab/gitlabhq!3451

Add spec to test different combinations.
Accept string for required_minimum_access_level
Allow more flexible project membership query

Fix broken specs : Generate new GPG key in place of expired one

Closes #32956

See merge request gitlab-org/gitlab!17853

[ci skip]

Fix Gitaly SearchBlobs flag RPC injection [Gitaly v1.59.3]

See merge request gitlab/gitlabhq!3434

Check that SAML identity linking validates the origin of the request

See merge request gitlab/gitlabhq!3377

Merge branch 'security-12717-fix-confidential-issue-assignee-visible-to-guests-12-2' into '12-2-stable'

Display only participants that user has permission to see

See merge request gitlab/gitlabhq!3402

Prevent Bypassing Email Verification using Salesforce

See merge request gitlab/gitlabhq!3406

Only render fixed number of mermaid blocks

See merge request gitlab/gitlabhq!3412

Hide disabled project milestones in project settings on group level

See merge request gitlab/gitlabhq!3415

Redirect user to root path after unsubscribing from private resource

See merge request gitlab/gitlabhq!3417

Add policy check if cross reference system notes are accessible

See merge request gitlab/gitlabhq!3427

Cancel all running CI jobs when user is blocked

See merge request gitlab/gitlabhq!3437

Filter not accessible label events

See merge request gitlab/gitlabhq!3441

Add argument to catch

See merge request gitlab-org/gitlab-ee!15911