security-10-4-todo-api-reveals-sensitive-information.yml\unreleased\changelogs - delta/gitlab/gitlab-ce.git - gitlab.com: gitlab-org/gitlab-ce.git

index : delta/gitlab/gitlab-ce.git

gitlab.com: gitlab-org/gitlab-ce.git

summary refs log tree commit diff

path: root/changelogs/unreleased/security-10-4-todo-api-reveals-sensitive-information.yml

blob: 329825d1e73d28f15c435e3c6484464872cb55e4 (plain)

---
title: Restrict Todo API mark_as_done endpoint to the user's todos only
merge_request:
author:
type: security