gitlab-org--gitlab-foss/changelogs/unreleased/security-refs-available-to-project-guest.yml
Tiago Botelho 8772bdabb2
Project guests no longer are able to see refs page
Adds download_code authorization check to ProjectsController#refs
action, to prevent a project guest from seeing branch, tags and
commits information
2018-12-19 10:21:02 +00:00

5 lines
100 B
YAML

---
title: Project guests no longer are able to see refs page
merge_request:
author:
type: security