diff options
| author | Yorick Peterse <yorickpeterse@gmail.com> | 2019-01-24 15:47:40 +0300 |
|---|---|---|
| committer | Yorick Peterse <yorickpeterse@gmail.com> | 2019-01-24 15:47:43 +0300 |
| commit | 2692cee68bb961019e555168a55f729a7e125095 (patch) | |
| tree | 5d8b5e989bade9ff727c7386b951ba39d9808fff /changelogs | |
| parent | 9128a397824d6e402bc5098fc5427c8280604881 (diff) | |
Merge branch 'security-2776-fix-add-reaction-permissions-11-6' into 'security-11-6'
[11.6] Revoke award_emoji permissions for confidential issues
See merge request gitlab/gitlabhq!2850
(cherry picked from commit f645472619fe1e1ec4fdaa02010408d548287efb)
47d86827 Prevent award_emoji to notes not visible to user
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/security-2776-fix-add-reaction-permissions.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-2776-fix-add-reaction-permissions.yml b/changelogs/unreleased/security-2776-fix-add-reaction-permissions.yml new file mode 100644 index 00000000000..3ad92578c44 --- /dev/null +++ b/changelogs/unreleased/security-2776-fix-add-reaction-permissions.yml @@ -0,0 +1,5 @@ +--- +title: Prevent awarding emojis to notes whose parent is not visible to user +merge_request: +author: +type: security |