Update a list of included parameters for Group Import/Export to use AttributesPermitter & allow-list approach
Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.
Similar to what has been done for Project Import/Export #341272 (closed) we need to update Group Import/Export to use Gitlab::ImportExport::AttributesPermitter
and allow-list approach to enhance its security.
Extend lib/gitlab/import_export/group/import_export.yml
with new section that contains attributes that should be included for import, similar to lib/gitlab/import_export/group/import_export.yml
:
included_attributes:
group:
...
Edited by Thiago Figueiró