gitlab-org--gitlab-foss/changelogs/unreleased/security-60039.yml

---
title: Prevent invalid branch for merge request
merge_request:
author:
type: security
Validate MR branch names Prevents refspec as branch name, which would bypass branch protection when used in conjunction with rebase. HEAD seems to be a special case with lots of occurrence, so it is considered valid for now. Another special case is `refs/head/*`, which can be imported. 2019-04-10 03:39:45 +00:00			`---`
			`title: Prevent invalid branch for merge request`
			`merge_request:`
			`author:`
			`type: security`