Skip authenticity token checks for Git HTTP (!4538) · Merge requests · GitLab.org / GitLab FOSS · GitLab

Jacob Vosmaer requested to merge jacobvosmaer-gitlab/gitlab-ce:git-http-no-authenticity-token into master Jun 08, 2016

What does this MR do?

Disable CSRF protection when serving Git HTTP clients.

Are there points in the code the reviewer needs to double check?

Not really.

Why was this MR needed?

Git clone was not working anymore https://gitlab.com/gitlab-org/gitlab-ce/issues/18331

Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/18331