Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAlexandru Croitor <acroitor@gitlab.com>2019-09-18 11:26:20 +0300
committerAlexandru Croitor <acroitor@gitlab.com>2019-09-23 12:20:08 +0300
commite82f50d0e5c2aecb8041ad73cba0a571cf5f38a7 (patch)
tree4ce60f045c40335df2eeae6029db4e3662f7bfc3 /changelogs
parent7099ecf77cb45c7b456a47f24064657ca59549b7 (diff)
Add policy check if cross reference system notes are accessible
Diffstat (limited to 'changelogs')
-rw-r--r--changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml6
1 files changed, 6 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml b/changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml
new file mode 100644
index 00000000000..03658c931a3
--- /dev/null
+++ b/changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml
@@ -0,0 +1,6 @@
+---
+title: Add a policy check for system notes that may not be visible due to cross references
+ to private items
+merge_request:
+author:
+type: security