diff options
| author | Stan Hu <stanhu@gmail.com> | 2018-07-17 22:50:08 -0700 |
|---|---|---|
| committer | Stan Hu <stanhu@gmail.com> | 2018-07-19 03:14:07 -0700 |
| commit | 50ff36265016728ab9372bff6b16b49e2d2364d6 (patch) | |
| tree | 68e7163f33dcee73ae80f3c90963b5280b4277c7 /spec/features/projects/blobs/blob_show_spec.rb | |
| parent | 98eccfc44c597ba14939659ca3b9150197129961 (diff) | |
| download | gitlab-ce-50ff36265016728ab9372bff6b16b49e2d2364d6.tar.gz | |
Escape username and password in UrlSanitizer#full_url
If a user uses a password with certain characters (e.g. /, #, +, etc.)
UrlSanitizer#full_url will generate an invalid URL that cannot be
parsed properly by Addressable::URI. If used with UrlBlocker, this
will be flagged as an invalid URI.
Diffstat (limited to 'spec/features/projects/blobs/blob_show_spec.rb')
0 files changed, 0 insertions, 0 deletions