gitlab-org--gitlab-foss/changelogs/unreleased/security-60039.yml
Mark Chao d8bddb1662 Validate MR branch names
Prevents refspec as branch name, which would bypass branch protection
when used in conjunction with rebase.

HEAD seems to be a special case with lots of occurrence,
so it is considered valid for now.

Another special case is `refs/head/*`, which can be imported.
2019-05-03 03:02:58 +08:00

5 lines
90 B
YAML

---
title: Prevent invalid branch for merge request
merge_request:
author:
type: security