Bob Trahan 8573d5b0c1 Policy - lock down loadCommit() from DiffusionRequest objects ... Summary: Ref T7094. The class DiffusionRequest has other public methods which use getUser() in an unguarded way. Code inspection of the call sites for loadCommit() also leads me to believe the $user is properly set. Test Plan: clicked around diffusion a bunch and everything seemed to work okay. (happy to test any particular esoteric endpoints that come to mind) Reviewers: epriestley Reviewed By: epriestley Subscribers: Korvin, epriestley Maniphest Tasks: T7094 Differential Revision: https://secure.phabricator.com/D11585		2015-02-01 09:33:12 -08:00
..
__tests__	Delete license headers from files	2012-11-05 11:16:51 -08:00
DiffusionGitRequest.php	Show a better message for empty repositories and invalid branches	2014-07-12 07:05:19 -07:00
DiffusionMercurialRequest.php	Show a better message for empty repositories and invalid branches	2014-07-12 07:05:19 -07:00
DiffusionRequest.php	Policy - lock down loadCommit() from DiffusionRequest objects	2015-02-01 09:33:12 -08:00
DiffusionSvnRequest.php	Show a better message for empty repositories and invalid branches	2014-07-12 07:05:19 -07:00