diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-09-26 16:52:33 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-09-26 16:52:33 +0300 |
| commit | f6fce08b36f3dcd3acf6156209d22b08b7967b9c (patch) | |
| tree | 2c26396049a8f3fd4d193fd808c1fdcd98e03eba /changelogs | |
| parent | 142522c9b2bea21f951e978cbb1e35b0f6c5909b (diff) | |
| parent | c01ad00ebd7e6f5979e426b735582632d54f36f8 (diff) | |
Merge branch 'security-12630-private-system-note-disclosed-in-graphql-12-1-ce' into '12-1-stable'
Add policy check if cross reference system notes are accessible
See merge request gitlab/gitlabhq!3428
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml b/changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml new file mode 100644 index 00000000000..03658c931a3 --- /dev/null +++ b/changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml @@ -0,0 +1,6 @@ +--- +title: Add a policy check for system notes that may not be visible due to cross references + to private items +merge_request: +author: +type: security |