Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAlexandru Croitor <acroitor@gitlab.com>2019-09-18 11:26:20 +0300
committerAlexandru Croitor <acroitor@gitlab.com>2019-09-25 11:55:43 +0300
commitb06a092312b0674eef59e50b20f4f8bd2dd1a8f4 (patch)
treede411c5aba2931391b04e5b4ce9a99f21030cc63 /changelogs
parent4be19d5f71e5ab912b9c09a46f356c996e9e0b0b (diff)
Add policy check if cross reference system notes are accessible
Diffstat (limited to 'changelogs')
-rw-r--r--changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml6
1 files changed, 6 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml b/changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml
new file mode 100644
index 00000000000..03658c931a3
--- /dev/null
+++ b/changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml
@@ -0,0 +1,6 @@
+---
+title: Add a policy check for system notes that may not be visible due to cross references
+ to private items
+merge_request:
+author:
+type: security