diff options
| author | Alexandru Croitor <acroitor@gitlab.com> | 2019-09-10 15:30:07 +0300 |
|---|---|---|
| committer | Alexandru Croitor <acroitor@gitlab.com> | 2019-09-23 11:58:12 +0300 |
| commit | a4e04c4c64dd6523643197eb50eb3e8c9d2cbf42 (patch) | |
| tree | 4bb6fa9f896d443e7585f960b555861a351b686d /changelogs | |
| parent | 7099ecf77cb45c7b456a47f24064657ca59549b7 (diff) | |
| download | gitlab-ce-a4e04c4c64dd6523643197eb50eb3e8c9d2cbf42.tar.gz | |
Redirect user to root path after unsubscribing from private resource
If user unsubsrcribes from a resource that they no longer have
access to they should not be revealed the resource path, but be
redirected to app root instead.
https://gitlab.com/gitlab-org/gitlab-ce/issues/64938
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/security-64938-dont-disclose-path.yml | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-64938-dont-disclose-path.yml b/changelogs/unreleased/security-64938-dont-disclose-path.yml new file mode 100644 index 00000000000..0c858401233 --- /dev/null +++ b/changelogs/unreleased/security-64938-dont-disclose-path.yml @@ -0,0 +1,6 @@ +--- +title: Fix new project path being disclosed through unsubscribe link of issue/merge + requests +merge_request: +author: +type: security |