Skip to content

Use allowlist for importing project attributes

Igor Frenkel requested to merge 341272-import-use-attr-permit-proj into master

What does this MR do and why?

The MR updates import functionality to filter out sensitive project attributes using an allowlist rather than a denylist.

How to set up and validate locally

The steps mentioned in this comment thread would be the best way to compare that the functionality hasn't changed: https://gitlab.com/gitlab-org/gitlab/-/issues/37322#note_688701081

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #341272 (closed)

Edited by Igor Frenkel

Merge request reports