diff options
| author | Thong Kuah <tkuah@gitlab.com> | 2018-10-26 23:53:40 +1300 |
|---|---|---|
| committer | Mayra Cabrera <mcabrera@gitlab.com> | 2018-10-26 09:47:00 -0500 |
| commit | 6eb3fc69f6a1f705b6f366dc14d306e1409ee721 (patch) | |
| tree | f86030a7c9383ba581f456a3797db8e7814eeb4b /changelogs | |
| parent | 160ed1d7a1d56135427dfa68980f9653e41bd907 (diff) | |
| download | gitlab-ce-6eb3fc69f6a1f705b6f366dc14d306e1409ee721.tar.gz | |
Monkey kubeclient to not follow any redirects.
This should prevent any malicious server from responding with a location
that will redirect us and expose internal services, as kubeclient's
rest-client will no longer follow redirects.
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/security-kubeclient-ssrf.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-kubeclient-ssrf.yml b/changelogs/unreleased/security-kubeclient-ssrf.yml new file mode 100644 index 00000000000..45fc41029fc --- /dev/null +++ b/changelogs/unreleased/security-kubeclient-ssrf.yml @@ -0,0 +1,5 @@ +--- +title: Monkey kubeclient to not follow any redirects. +merge_request: +author: +type: security |