diff options
| author | Robert Speicher <robert@gitlab.com> | 2018-01-19 02:10:19 +0300 |
|---|---|---|
| committer | Robert Speicher <rspeicher@gmail.com> | 2018-01-31 23:04:22 +0300 |
| commit | 307d17f6166bb3283f1c88209813099a6c4a0b37 (patch) | |
| tree | f76ee0d84d70214362d4be71430bb6a097339aad /changelogs | |
| parent | 5ceeb9e61e46452bc9686ccb40d5503435b0d4a2 (diff) | |
Merge branch 'security-10-4-todo-api-reveals-sensitive-information' into 'security-10-4'
Restrict Todo API mark_as_done endpoint to the user's todos only
See merge request gitlab/gitlabhq!2313
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/security-10-4-todo-api-reveals-sensitive-information.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-10-4-todo-api-reveals-sensitive-information.yml b/changelogs/unreleased/security-10-4-todo-api-reveals-sensitive-information.yml new file mode 100644 index 00000000000..329825d1e73 --- /dev/null +++ b/changelogs/unreleased/security-10-4-todo-api-reveals-sensitive-information.yml @@ -0,0 +1,5 @@ +--- +title: Restrict Todo API mark_as_done endpoint to the user's todos only +merge_request: +author: +type: security |