diff options
| author | Robert Speicher <rspeicher@gmail.com> | 2017-12-14 13:32:55 -0600 |
|---|---|---|
| committer | Robert Speicher <rspeicher@gmail.com> | 2017-12-19 15:45:08 -0600 |
| commit | 3e4b45fc216875ff25647675d92448a53a740d9b (patch) | |
| tree | 836b9459d674c2aa0c34e63ed3f4c55999729d1f /scripts/pre-commit | |
| parent | 8d0ad36bcfc0ef95ee9a116604ba1516367dbb27 (diff) | |
| download | gitlab-ce-3e4b45fc216875ff25647675d92448a53a740d9b.tar.gz | |
Only include the user's ID in the time_spent command's update hash
Previously, this would include the entire User record in the update
hash, which was rendered in the response using `to_json`, erroneously
exposing every attribute of that record, including their (now removed)
private token.
Now we only include the user ID, and perform the lookup on-demand.
Diffstat (limited to 'scripts/pre-commit')
0 files changed, 0 insertions, 0 deletions