kotovalexarian-likes-gitlab/gitlab-org--gitlab-foss
1
0
Fork 0
Code Releases Activity
gitlab-org--gitlab-foss/changelogs/unreleased/security-mr-head-pipeline-leak.yml

6 lines
120 B
YAML
Raw Normal View History

Permission fix for MergeRequestsController#pipeline_status - Use set_pipeline_variables to filter for visible pipelines - Mimic response of nonexistent pipeline if not found - Provide set_pipeline_variables as a before_filter for other actions
2019-07-22 14:16:15 -04:00
---
title: Check permissions before responding in MergeController#pipeline_status
merge_request:
author:
type: security
Copy permalink