diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-08-26 10:42:18 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-08-26 10:42:18 +0300 |
| commit | 61f449f29f4fa0753bd771fc26f2a51037b46ade (patch) | |
| tree | 599c20cd3185e37542673e2aa9a4d6fb3fe8ffc0 /changelogs/unreleased | |
| parent | 90ac6cb806d8db0dc265de0e1ea7b4f3990026e8 (diff) | |
| parent | 51c25223a3f3623cac4dad21aa5bf6068dc6af0f (diff) | |
Merge branch 'security-mr-head-pipeline-leak-12-0' into '12-0-stable'
Permission fix for MergeRequestsController#pipeline_status
See merge request gitlab/gitlabhq!3279
Diffstat (limited to 'changelogs/unreleased')
| -rw-r--r-- | changelogs/unreleased/security-mr-head-pipeline-leak.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-mr-head-pipeline-leak.yml b/changelogs/unreleased/security-mr-head-pipeline-leak.yml new file mode 100644 index 00000000000..b15b353ff41 --- /dev/null +++ b/changelogs/unreleased/security-mr-head-pipeline-leak.yml @@ -0,0 +1,5 @@ +--- +title: Check permissions before responding in MergeController#pipeline_status +merge_request: +author: +type: security |