diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-09-26 16:53:18 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-09-26 16:53:18 +0300 |
| commit | 42902b2fcba875241edca5ed5b24c6eb8108b4d0 (patch) | |
| tree | 56ed32824607102e5c11ab0ca9da79acf5e93187 /changelogs | |
| parent | 7224fd1cc5bda5aa5b0e822f7e5eba66b8d87012 (diff) | |
| parent | e82f50d0e5c2aecb8041ad73cba0a571cf5f38a7 (diff) | |
Merge branch 'security-12630-private-system-note-disclosed-in-graphql-12-3-ce' into '12-3-stable'
Add policy check if cross reference system notes are accessible
See merge request gitlab/gitlabhq!3426
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml b/changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml new file mode 100644 index 00000000000..03658c931a3 --- /dev/null +++ b/changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml @@ -0,0 +1,6 @@ +--- +title: Add a policy check for system notes that may not be visible due to cross references + to private items +merge_request: +author: +type: security |