Skip to content

Hide What's New for unauthenticated users

Jay requested to merge jswain_whats_new_self_managed_authenticated into master

What does this MR do?

Hide the What's New feature for unauthenticated users on self-managed instances. This feature request came from users that were concerned of a version info leak.

part of: #323492 (closed)

Screenshots (strongly suggested)

before after
Screen_Shot_2021-04-14_at_12.19.11_PM Screen_Shot_2021-04-14_at_12.17.56_PM

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team
Edited by Markus Koller

Merge request reports