[ci skip]

[ci skip]

Fix for three open redirect vulns using redirect_to url_for(params.merge)))

See merge request !2082

Fix for path disclosure in project import/export

See merge request !2080

Previously accidently added a test for a feature that does not exist in this release
: preserved styles in labels

Fix for open redirect vuln involving continue[to] params

See merge request !2083

Don’t show source project name when user does not have access

See merge request !2081

Remove class from SanitizationFilter whitelist

See merge request !2079

[ci skip]

[ci skip]

[ci skip]

Rework ES permissions check

See merge request !507

nil check for url_blocker?

See merge request !2076

fix for render json include leaks

See merge request !2074
Conflicts:
	app/controllers/projects/merge_requests_controller.rb
	spec/controllers/projects/issues_controller_spec.rb

Adds rel="noopener noreferrer" to all links with target="_blank"

See merge request !2071
Conflicts:
	app/assets/javascripts/environments/components/environment_external_url.js

Protect server against SSRF in project import URLs

See merge request !2068

Only show public emails in atom feeds

See merge request !2066

Backport GitLab.com Pages IP change to 8.17

[ci skip]

See merge request !1421

Backport GitLab.com Pages IP change to 8.17

[ci skip]

See merge request !9934

Signed-off-by: Rémy Coutable <remy@rymai.me>

Signed-off-by: Rémy Coutable <remy@rymai.me>

Signed-off-by: Rémy Coutable <remy@rymai.me>

Signed-off-by: Rémy Coutable <remy@rymai.me>

Include instructions to update /etc/default/gitlab

See merge request !9926

Docs: update GL Pages IP on GL.com

See merge request !9739

We were missing some info on updating /etc/default/gitlab

In particular, changes needed to be made in order for Pages to work,
see https://gitlab.com/gitlab-org/gitlab-ce/issues/29372

[ci skip]

[ci skip]

[ci skip]