Skip to content

Add Setting to disable feed_tokens

Joern Schneeweisz requested to merge js/disable_feed_token into master

What does this MR do?

This MR disables the usage and display of feed_token for RSS/Atom feeds and ICS based calendars.

Closes #231493 (closed)

Screenshots (strongly suggested)

The MR will add an admin setting Disable feed token under Settings/General/Visibilty and access controls/Feed Token:

image

When feed_tokens are being disabled via this setting Feed token the section under the path /-/profile/personal_access_tokens will disappear and the tokens will stop working.

Screenshot when disabled: image

Screenshot when enabled (the default):

image

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team
Edited by Ezekiel Kigbo

Merge request reports