kotovalexarian-likes-gitlab
/
gitlab-org--gitlab-foss
1
0
Fork 0
Code Releases Activity
gitlab-org--gitlab-foss/changelogs/unreleased/redact-links-dev.yml

6 lines
94 B
YAML
Raw Normal View History

Redact unsubscribe links in issuable texts It's possible that user pastes accidentally also unsubscribe link which is included in footer of notification emails. This unsubscribe link contains personal token which attacker then use to act as the original user (e.g. for sending comments under his/her identity).
2018-09-20 14:14:46 +00:00
---
title: Redact personal tokens in unsubscribe links.
merge_request:
author:
type: security