Follow-up from "Use the Dependency Proxy with private GitLab projects"

The following discussion from !46042 (merged) should be addressed:

  • @vdesousa started a discussion: (+5 comments)

    @sabrams is this checking also when we override the request with _method ? I'm asking this because with @10io we had some hackerone reports that were leveraging it.

Edited by Steve Abrams