diff options
| author | George Koltsov <gkoltsov@gitlab.com> | 2019-08-06 16:05:18 +0300 |
|---|---|---|
| committer | George Koltsov <gkoltsov@gitlab.com> | 2019-08-15 12:42:17 +0300 |
| commit | 5db1ffc55f91b62725f981d29a85f110751c2566 (patch) | |
| tree | 49a34de83a2589c421b7315fb52c702f679a3f13 /changelogs | |
| parent | 4016bcac51d6dc9c24eeae6688bf3a72820ca719 (diff) | |
Fix project import restricted visibility bypass
Add Gitlab::VisibilityLevelChecker that verifies
selected project visibility level (or overridden param)
is not restricted when creating or importing a project
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/security-project-import-bypass.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-project-import-bypass.yml b/changelogs/unreleased/security-project-import-bypass.yml new file mode 100644 index 00000000000..fc7b823509c --- /dev/null +++ b/changelogs/unreleased/security-project-import-bypass.yml @@ -0,0 +1,5 @@ +--- +title: Fix project import restricted visibility bypass via API +merge_request: +author: +type: security |