diff options
| author | Grzegorz Bizon <grzesiek.bizon@gmail.com> | 2017-03-30 15:41:51 +0200 |
|---|---|---|
| committer | Grzegorz Bizon <grzesiek.bizon@gmail.com> | 2017-03-30 15:41:51 +0200 |
| commit | cf042068b5f69b416640f9a4fcb21fbec1082268 (patch) | |
| tree | 1221cbd140f3399d8ade3d92a9224fbb94f5e375 /app/services/auth | |
| parent | fffc8a59d7f193e451daace7c69f33603c906e8f (diff) | |
| download | gitlab-ce-cf042068b5f69b416640f9a4fcb21fbec1082268.tar.gz | |
Do not allow registry requests for invalid repositories
Diffstat (limited to 'app/services/auth')
| -rw-r--r-- | app/services/auth/container_registry_authentication_service.rb | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/app/services/auth/container_registry_authentication_service.rb b/app/services/auth/container_registry_authentication_service.rb index 839f514ad58..dcb728b6151 100644 --- a/app/services/auth/container_registry_authentication_service.rb +++ b/app/services/auth/container_registry_authentication_service.rb @@ -64,6 +64,10 @@ module Auth end def process_repository_access(type, path, actions) + # TODO, add specs for invalid paths + # + return unless path.valid? + requested_project = path.repository_project return unless requested_project |