-
- Downloads
There was an error fetching the commit references. Please try again later.
Drop the redundant private_token GET parameter
Quoting from the GitLab API: "You can use a personal access token to authenticate with the API by passing it in either the private_token parameter or the Private-Token header.". By using it as GET parameter we expose our tokens to sniffing!
Please register or sign in to comment