Skip to content

Sanitize default branch name in repo settings

Resolves #337305 (closed)

What does this MR do?

This add defense-in-depth security improvement for default branch name values. This is done by adding validation to sanitize javascript tags from the input before saving it to the DB. This change affects

  1. Group's repo settings
  2. Admin's repo settings

Why?

This is done to prevent issues like #336460 (closed).

Screenshot / Demo

demo_sanitize_default_branch_name

Related links

Edited by Dheeraj Joshi

Merge request reports

Loading