Skip to content

Reject HEAD requests to info/refs endpoint

Stan Hu requested to merge sh-reject-info-refs-head-requests into master

In production, we see high error rates due to clients attempting to use the dumb Git HTTP protocol with HEAD /foo/bar.git/info/refs endpoint. This isn't supported and causes Error 500s because Workhorse doesn't send along its secret because it's not proxying this request.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/54579

Merge request reports