changelogs/unreleased/security-users-can-update-their-password-without-entering-current-password.yml · master · Forest Godfrey / gitlab-ce

BigW Consortium Gitlab

Remove password and password_confirmation from whitelisted params in… · 8417f74f

authored May 04, 2018

Remove password and password_confirmation from whitelisted params in ProfilesController to prevent password from being changed without previous password being provided

8417f74f

security-users-can-update-their-password-without-entering-current-password.yml 131 Bytes

Edit Web IDE

Replace security-users-can-update-their-password-without-entering-current-password.yml