diff options
| author | Bob Van Landuyt <bob@gitlab.com> | 2018-10-05 20:47:52 +0300 |
|---|---|---|
| committer | Bob Van Landuyt <bob@gitlab.com> | 2018-10-05 20:47:52 +0300 |
| commit | 36bd07838263f709b0ca9af4830ee75cde7e8f97 (patch) | |
| tree | b64f4170048b6299b45e8b50900584ac58af5984 /changelogs | |
| parent | d26bf613b45066b3d2c78ef539cffc109cc39064 (diff) | |
| parent | 829c9c65f9b730b3ecad7d3ba222e3dcd6489b85 (diff) | |
Merge branch 'security-bw-confidential-titles-through-markdown-api' into 'master'
[master] Confidential issue/private snippet titles can be read by unauthenticated user through GFM markdown API
Closes #2706
See merge request gitlab/gitlabhq!2507
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/security-bw-confidential-titles-through-markdown-api.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-bw-confidential-titles-through-markdown-api.yml b/changelogs/unreleased/security-bw-confidential-titles-through-markdown-api.yml new file mode 100644 index 00000000000..e0231b7962f --- /dev/null +++ b/changelogs/unreleased/security-bw-confidential-titles-through-markdown-api.yml @@ -0,0 +1,5 @@ +--- +title: Markdown API no longer displays confidential title references unless authorized +merge_request: +author: +type: security |