Commit 45b7fe40 authored by Marcia Ramos's avatar Marcia Ramos

Merge branch 'plantuml-security-notice' into 'master'

Add security section to PlantUML documentation

Closes #18085

See merge request gitlab-org/gitlab!33061
parents 35a686bf cf879ebb
...@@ -105,6 +105,21 @@ To activate the changes, run the following command: ...@@ -105,6 +105,21 @@ To activate the changes, run the following command:
sudo gitlab-ctl reconfigure sudo gitlab-ctl reconfigure
``` ```
### Security
PlantUML has features that allows fetching network resources.
```plaintext
@startuml
start
' ...
!include http://localhost/
stop;
@enduml
```
**If you self-host the PlantUML server, network controls should be put in place to isolate it.**
## GitLab ## GitLab
You need to enable PlantUML integration from Settings under Admin Area. To do You need to enable PlantUML integration from Settings under Admin Area. To do
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment