Andras Bacsai 6f557cf17f fix(security): enforce GitLab App authorization parity with GitHub ... GitlabAppPolicy previously allowed any authenticated user to update, delete, and create GitLab sources. Align it with GithubAppPolicy, require Application create authorization on the private-repo wizard, and reject OAuth callbacks from non-admins so members cannot escalate privileges.		2026-07-20 23:21:40 +02:00
..
Api	Merge remote-tracking branch 'origin/next' into v5-parallel-inertia-react	2026-07-20 12:09:17 +02:00
V5	feat(v5): authorize creates, deep-link selection, list apps in v4	2026-07-18 15:55:47 +02:00
Webhook	fix(security): enforce GitLab App authorization parity with GitHub	2026-07-20 23:21:40 +02:00
Controller.php	fix(auth): preserve invite login with database sessions	2026-07-03 09:38:05 +02:00
OauthController.php	fix: normalize oauth emails before matching users	2026-04-09 09:38:56 -06:00
UploadController.php	Merge remote-tracking branch 'origin/next' into harden-database-import-files	2026-06-29 10:35:35 +02:00