diff options
| author | Felipe Artur Cardozo <fcardozo@gitlab.com> | 2018-07-27 00:16:03 +0300 |
|---|---|---|
| committer | Felipe Artur Cardozo <fcardozo@gitlab.com> | 2018-07-27 00:16:03 +0300 |
| commit | bc1b4d9fef7e55f9afffcfaa4f784b984ca97f31 (patch) | |
| tree | 48c5c0cd09a1870494e4cfccd37b1924ee5af072 /config | |
| parent | e1d86b75826dc0ef858e31da09ae678155b1984b (diff) | |
| parent | 2408519e08084f6d81f2628eba6868910ee7fcfa (diff) | |
Merge branch 'security-fj-missing-csrf-system-hooks' into 'master'
[master] Missing CSRF in System Hooks
See merge request gitlab/gitlabhq!2419
Diffstat (limited to 'config')
| -rw-r--r-- | config/routes/admin.rb | 2 | ||||
| -rw-r--r-- | config/routes/project.rb | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/config/routes/admin.rb b/config/routes/admin.rb index ff27ceb50dc..109f00631fb 100644 --- a/config/routes/admin.rb +++ b/config/routes/admin.rb @@ -54,7 +54,7 @@ namespace :admin do resources :hooks, only: [:index, :create, :edit, :update, :destroy] do member do - get :test + post :test end resources :hook_logs, only: [:show] do diff --git a/config/routes/project.rb b/config/routes/project.rb index 5057e937941..8e019f8c8bb 100644 --- a/config/routes/project.rb +++ b/config/routes/project.rb @@ -301,7 +301,7 @@ constraints(::Constraints::ProjectUrlConstrainer.new) do resources :hooks, only: [:index, :create, :edit, :update, :destroy], constraints: { id: /\d+/ } do member do - get :test + post :test end resources :hook_logs, only: [:show] do |