Require `schemes:` kwarg for Gitlab::URLBlocker.validate!
Related to RepositoryPipeline allows importing of local gi... (#372165 - closed)
Problem
A lot of people think that Gitlab::URLBlocker.validate!
defaults to schemes: %w[http https]
- It does not. It actually allows any scheme by default
Proposal
Make schemes:
kwarg mandatory
The alternative is that we make schemes
default to %w[http https]
, but we might be making an invalid assumption by doing so.
Unsure which group should action this.
Edited by Nick Malcolm