summaryrefslogtreecommitdiff
path: root/changelogs
diff options
context:
space:
mode:
authorGitLab Release Tools Bot <robert+release-tools@gitlab.com>2019-09-27 18:15:41 +0000
committerGitLab Release Tools Bot <robert+release-tools@gitlab.com>2019-09-27 18:15:41 +0000
commit6a429c2086ce5aadae69d2223ccbe4e4af3be280 (patch)
tree1212b71e19adf2d3df39a28ac82da935d65b4055 /changelogs
parent46b736802a5dcf2051b39dfe4b41f7610370e38f (diff)
parent513752211978c93dbb9548763a04395a9b281c45 (diff)
downloadgitlab-ce-6a429c2086ce5aadae69d2223ccbe4e4af3be280.tar.gz
Merge branch 'security-12630-private-system-note-disclosed-in-graphql-ce' into 'master'
Add policy check if cross reference system notes are accessible See merge request gitlab/gitlabhq!3425
Diffstat (limited to 'changelogs')
-rw-r--r--changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml6
1 files changed, 6 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml b/changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml
new file mode 100644
index 00000000000..03658c931a3
--- /dev/null
+++ b/changelogs/unreleased/security-12630-private-system-note-disclosed-in-graphql.yml
@@ -0,0 +1,6 @@
+---
+title: Add a policy check for system notes that may not be visible due to cross references
+ to private items
+merge_request:
+author:
+type: security