Remote hacker can download all the files of master branch in public projects where everything is members only.

Hi team, I found this weird behavior which I thought I should report, a malicious hacker can remotely download files of any branch in a public project where all permissions are ==member-only==, Gitlab uses a link to download files of a branch, normally ==an unauthenticated user will not be able to …

{
  "id": "e4cd88a3-0530-4596-b497-88b2de68115b",
  "version": "2.0",
  "name": "Gitlab-3",
  "url": "",
  "tests": [{
    "id": "f3bbf89a-47e1-47e9-959c-7beebaf6226c",
    "name": "hhh",
    "commands": [{
      "id": "f0eb0ad5-60db-4fdc-89ac-4f397416d931",
      "comment": "",
      "command": …