summaryrefslogtreecommitdiff
path: root/changelogs/unreleased
diff options
context:
space:
mode:
authorJames Lopez <james@jameslopez.es>2018-10-30 12:56:34 +0100
committerJames Lopez <james@jameslopez.es>2018-11-23 14:04:00 +0100
commit9d3f2244c18a0d0bd38c7f2a341b9a92c5eefee2 (patch)
tree2e23349200811cc33bcaf28e5c629e901a6ea75b /changelogs/unreleased
parentd90b1cd041b9d315d46f0dc11826b045f553023e (diff)
downloadgitlab-ce-9d3f2244c18a0d0bd38c7f2a341b9a92c5eefee2.tar.gz
Update code to use API scope on PAT auth
Diffstat (limited to 'changelogs/unreleased')
-rw-r--r--changelogs/unreleased/security-fix-pat-web-access.yml5
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-fix-pat-web-access.yml b/changelogs/unreleased/security-fix-pat-web-access.yml
new file mode 100644
index 00000000000..62ffb908fe5
--- /dev/null
+++ b/changelogs/unreleased/security-fix-pat-web-access.yml
@@ -0,0 +1,5 @@
+---
+title: Restrict Personal Access Tokens to API scope on web requests
+merge_request:
+author:
+type: security