diff options
author | Douwe Maan <douwe@gitlab.com> | 2016-10-20 14:54:55 +0000 |
---|---|---|
committer | Rémy Coutable <remy@rymai.me> | 2016-10-24 15:49:05 +0200 |
commit | 4a0e8f59e25a0b33e8e8cf33678688df912da8eb (patch) | |
tree | 3e85c7274cf56f34f591c6618c8ee9301a87e37f /app/views/import | |
parent | 0e43e34b45c6e1de68e65c8a51df078e850ec2c6 (diff) | |
download | gitlab-ce-4a0e8f59e25a0b33e8e8cf33678688df912da8eb.tar.gz |
Merge branch 'security-fix-leaking-namespace-name' into 'security'
Check that user has access to a given namespace to prevent leaking namespace names.
See merge request !2009
Diffstat (limited to 'app/views/import')
-rw-r--r-- | app/views/import/gitlab_projects/new.html.haml | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/app/views/import/gitlab_projects/new.html.haml b/app/views/import/gitlab_projects/new.html.haml index 44e2653ca4a..767dffb5589 100644 --- a/app/views/import/gitlab_projects/new.html.haml +++ b/app/views/import/gitlab_projects/new.html.haml @@ -9,12 +9,12 @@ %p Project will be imported as %strong - #{@namespace_name}/#{@path} + #{@namespace.name}/#{@path} %p To move or copy an entire GitLab project from another GitLab installation to this one, navigate to the original project's settings page, generate an export file, and upload it here. .form-group - = hidden_field_tag :namespace_id, @namespace_id + = hidden_field_tag :namespace_id, @namespace.id = hidden_field_tag :path, @path = label_tag :file, class: 'control-label' do %span GitLab project export |