Bug: work_items route is not protected for work_items only
Summary
Gitlab redirects issues of type "work_item" to "work_item" URL if accessed from "issues" URL.
But it doesn't do the opposite, i.e redirect regular issue accessed from "work_item" URL:
-
https://gitlab.com/gitlab-org/gitlab/-/issues/463395
(#463395) -
https://gitlab.com/gitlab-org/gitlab/-/work_items/463395
(#463395)
They both show issue content, additionally "work_items/463395" shows some bogus relation, like it's parent is work_items/13080
:
https://gitlab.com/groups/gitlab-org/-/work_items/13080
which is actually 404 for me, due issue missing or it's being private issue.
additional bugs/misfeatures: seems both work item and issue links are rendered the same (as issue):
Steps to reproduce
- Take any issue url
- Replace "issues" part with "work_items" in the url.
Edited by Elan Ruusamäe