4 ms·
Doesn't this inadvertently give users access to something they might not otherwise have? That is, the ability to add labels on issues. Might not really be a sec
by michaelmior 11y ago
Doesn't this inadvertently give users access to something they might not otherwise have? That is, the ability to add labels on issues. Might not really be a security concern, but not really desirable behaviour either.
- jamesRaybould 11y agoI don't think so, it seems like its just a link to what you can see within the UI anyway and simply pre selects it for you. But I am by no means an expert on it and it is pretty simple to experiment with if you want to give it a try
- ossreality 11y agoPeople who aren't owners can't normally add labels.
- OJFord 11y agoThey presumably still can't via the URL.