diff options
| author | Bob Van Landuyt <bob@vanlanduyt.co> | 2019-07-12 12:10:54 +0300 |
|---|---|---|
| committer | Bob Van Landuyt <bob@vanlanduyt.co> | 2019-07-17 14:54:34 +0300 |
| commit | c32e873a26bffcb66fec907a1a1b27142e376c08 (patch) | |
| tree | a2cee29d1b739764d3ac74e9cd9f9d2e19d85213 /changelogs | |
| parent | 8bc768d86f1fd341a6ee9cc38fecacbff2d63cdd (diff) | |
Filter params in MR build service
Reusing the existing `IssuableBaseService#filter_params` which uses
the policies to determine what params a user can set, and which values
it can be set to.
This also removed the need for the seperate call to
`IssuableBaseService#ensure_milestone_available`.
The `Issues::BuildService` does not suffer from this because it limits
the params that are assignable to the `title`, `description` and
`milestone_id`.
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/security-bvl-filter-mr-params.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-bvl-filter-mr-params.yml b/changelogs/unreleased/security-bvl-filter-mr-params.yml new file mode 100644 index 00000000000..4433ec73b7c --- /dev/null +++ b/changelogs/unreleased/security-bvl-filter-mr-params.yml @@ -0,0 +1,5 @@ +--- +title: Filter merge request params on the new merge request page +merge_request: +author: +type: security |