GitLab steht wegen Wartungsarbeiten am Montag, den 10. Mai, zwischen 17:00 und 19:00 Uhr nicht zur Verfügung.

  1. 19 Feb, 2019 1 commit
    • Tiger's avatar
      Validate session key when authorizing with GCP to create a cluster · fc8c1a77
      Tiger authored
      It was previously possible to link a GCP account to another
      user's GitLab account by having them visit the callback URL,
      as there was no check that they were the initiator of the
      request.
      
      We now reject the callback unless the state parameter
      matches the one added to the initiating user's session.
      fc8c1a77