Skip to content
Snippets Groups Projects
  1. Feb 01, 2020
  2. Jan 10, 2020
  3. Dec 11, 2019
  4. Nov 12, 2019
  5. Sep 16, 2019
  6. Sep 03, 2019
  7. Sep 02, 2019
  8. Jul 16, 2019
  9. Jul 03, 2019
  10. May 03, 2019
    • Krasimir Angelov's avatar
      Allow guests users to access project releases · 241ba4be
      Krasimir Angelov authored
      This is step one of resolving
      https://gitlab.com/gitlab-org/gitlab-ce/issues/56838.
      
      Here is what changed:
      - Revert the security fix from bdee9e84.
      - Do not leak repository information (tag name, commit) to guests in API
      responses.
      - Do not include links to source code in API responses for users that do
      not have download_code access.
      - Show Releases in sidebar for guests.
      - Do not display links to source code under Assets for users that do not
      have download_code access.
      
      GET ':id/releases/:tag_name' still do not allow guests to access
      releases. This is to prevent guessing tag existence.
      241ba4be
  11. Jan 24, 2019
  12. Jan 11, 2019
  13. Jan 04, 2019
  14. Dec 31, 2018
Loading