Merge branch 'security-2754-fix-lfs-import-11-4' into 'security-11-4'
[11.4] Validate LFS hrefs before downloading them See merge request gitlab/gitlabhq!2699
Showing
- app/services/projects/lfs_pointers/lfs_download_service.rb 3 additions, 0 deletionsapp/services/projects/lfs_pointers/lfs_download_service.rb
- changelogs/unreleased/security-2754-fix-lfs-import.yml 5 additions, 0 deletionschangelogs/unreleased/security-2754-fix-lfs-import.yml
- spec/services/projects/lfs_pointers/lfs_download_service_spec.rb 12 additions, 0 deletions...rvices/projects/lfs_pointers/lfs_download_service_spec.rb
Please register or sign in to comment