changelogs/unreleased/security-296-private_profile_exposure.yml · 0217c50e1711649aac2113cfcebdc4c6bb12b395 · nexedi / gitlab-ce

You need to sign in or sign up before continuing.

Mario de la Ossa authored Nov 13, 2020

When a User's profile is marked as private, we should never show
group nor project membership information via our API.

0217c50e

security-296-private_profile_exposure.yml 141 Bytes