diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-10-29 18:58:14 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-10-29 18:58:14 +0300 |
| commit | a7329f4372f4e0bc2c5d9af5b6d30cb4ad94ad7d (patch) | |
| tree | 9b387d2fc6d0b20efab499bc55c3bbce026da2c8 /changelogs | |
| parent | a0043682b500ce39ff4eba00e8c1cecc64819ea1 (diff) | |
| parent | 8395032721f6d6cb26126a5bffcb42984a240c07 (diff) | |
Merge branch 'security-remove-leaky-401-responses-master' into 'master'
Private/internal repository enumeration via bruteforce on a vulnerable URL
See merge request gitlab/gitlabhq!3454
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/29986-remove-leaky-401-responses.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/29986-remove-leaky-401-responses.yml b/changelogs/unreleased/29986-remove-leaky-401-responses.yml new file mode 100644 index 00000000000..3d60011b63f --- /dev/null +++ b/changelogs/unreleased/29986-remove-leaky-401-responses.yml @@ -0,0 +1,5 @@ +--- +title: Standardize error response when route is missing +merge_request: +author: +type: security |