3 reasons GitLab isn't vulnerable to Gollum + 1 tip
Dec 9, 2014Job van der Voort

Summary
This post details how GitLab avoids a specific Remote Code Execution (RCE) vulnerability in the Gollum wiki by not using Gollum's search functionality, by using `Shellwords.shellescape(query)` for search queries, and by switching to the Rugged library instead of Grit. It also recommends adopting secure coding guidelines for Ruby developers to prevent similar vulnerabilities.