Skip to content

[WARNING] I am not supposed to do this. I think you have a security issue.#7730

Closed
julianxhokaxhiu wants to merge 2 commits into
mainfrom
cpratap994-patch-1
Closed

[WARNING] I am not supposed to do this. I think you have a security issue.#7730
julianxhokaxhiu wants to merge 2 commits into
mainfrom
cpratap994-patch-1

Conversation

@julianxhokaxhiu
Copy link
Copy Markdown

This PR is a simple test about creating a PR inside a repository I don't own permissions to operate, although I can create PRs into.

Apparently you can do this in any repo and I've reported this already to Support but they didn't found the source of the issue. I think I found it. Just go on any repository you want and you don't own, click on Pull Requests and then New Pull Request, pick two branches you don't own and create a PR, just like this one.

I think that opening PRs inside a repository by any other user should be allowed only from their personal forks into the main forked repository. If that's not the case, I lost the point where Github started to allow this.

Would you be able to consider ironing this part and fixing it instead please?

Thank you in advance,
Julian

Chandra Pratap and others added 2 commits January 25, 2021 22:04
@welcome
Copy link
Copy Markdown

welcome Bot commented Jun 26, 2021

Thanks for opening this pull request! A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the contributing guidelines.

@mistaken-pull-closer
Copy link
Copy Markdown

Thanks for your submission.

It appears that you've created a pull request using one of our repository's branches. Since this is
almost always a mistake, we're going to go ahead and close this. If it was intentional, please
let us know what you were intending and we can see about reopening it.

Thanks again!

@mistaken-pull-closer mistaken-pull-closer Bot added the invalid This issue/PR is invalid label Jun 26, 2021
@github-actions github-actions Bot added the triage Do not begin working on this issue until triaged by the team label Jun 26, 2021
@heiskr heiskr deleted the cpratap994-patch-1 branch September 21, 2022 15:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

invalid This issue/PR is invalid triage Do not begin working on this issue until triaged by the team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants