diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-08-26 10:42:14 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-08-26 10:42:14 +0300 |
| commit | 239a6dc18b34f5e54e8c2ae8167fdc7a3a440004 (patch) | |
| tree | 6ab17c4acb655240335307e39fe907a65f9e6bb6 /changelogs | |
| parent | 7d9fd99d3b1feb5366beae3f7b3f4d3d4ca9c5ee (diff) | |
| parent | 211c3baec312eb588e2a3e8177a114d3c179d359 (diff) | |
Merge branch 'security-mr-head-pipeline-leak-12-2' into '12-2-stable'
Permission fix for MergeRequestsController#pipeline_status
See merge request gitlab/gitlabhq!3322
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/security-mr-head-pipeline-leak.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-mr-head-pipeline-leak.yml b/changelogs/unreleased/security-mr-head-pipeline-leak.yml new file mode 100644 index 00000000000..b15b353ff41 --- /dev/null +++ b/changelogs/unreleased/security-mr-head-pipeline-leak.yml @@ -0,0 +1,5 @@ +--- +title: Check permissions before responding in MergeController#pipeline_status +merge_request: +author: +type: security |