diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-10-29 18:58:14 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-10-29 18:58:14 +0300 |
| commit | a7329f4372f4e0bc2c5d9af5b6d30cb4ad94ad7d (patch) | |
| tree | 9b387d2fc6d0b20efab499bc55c3bbce026da2c8 /spec/controllers/projects_controller_spec.rb | |
| parent | a0043682b500ce39ff4eba00e8c1cecc64819ea1 (diff) | |
| parent | 8395032721f6d6cb26126a5bffcb42984a240c07 (diff) | |
Merge branch 'security-remove-leaky-401-responses-master' into 'master'
Private/internal repository enumeration via bruteforce on a vulnerable URL
See merge request gitlab/gitlabhq!3454
Diffstat (limited to 'spec/controllers/projects_controller_spec.rb')
| -rw-r--r-- | spec/controllers/projects_controller_spec.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/spec/controllers/projects_controller_spec.rb b/spec/controllers/projects_controller_spec.rb index 321f5ecdbc9..22538565698 100644 --- a/spec/controllers/projects_controller_spec.rb +++ b/spec/controllers/projects_controller_spec.rb @@ -1149,7 +1149,7 @@ describe ProjectsController do context 'private project with token authentication' do let(:private_project) { create(:project, :private) } - it_behaves_like 'authenticates sessionless user', :show, :atom do + it_behaves_like 'authenticates sessionless user', :show, :atom, ignore_incrementing: true do before do default_params.merge!(id: private_project, namespace_id: private_project.namespace) |