Skip to content

[Bug]: Private GitLab uploads do not load in MR descriptions #11412

Description

@Rasalas

Area

apps/web, apps/server

Steps to reproduce

  1. Sign in to a self-hosted GitLab instance with glab and add a private repository to T3 Code.
  2. Create a merge request and upload a PNG and a short MP4 to its description using GitLab's upload UI.
  3. Open that MR in T3 Code's pull request panel.

GitLab stores these uploads as relative /uploads/<secret>/<filename> references. The same problem affects copied project-ID upload links. The private test repository is on a local network, so it cannot be shared publicly; the steps above reproduce it with another GitLab installation.

Expected behavior

The uploaded image is visible. The video plays and supports seeking using the environment's GitLab login.

Actual behavior

The image is unavailable and the video cannot play. Relative image paths can be mistaken for workspace files, and anonymous browser requests cannot retrieve private uploads.

Private GitLab MR with unavailable image and video

Impact

Major degradation for MR descriptions that use screenshots or recordings to explain changes.

Version and environment

Reproduced on main at e816064945, web client on macOS, private self-hosted GitLab. GitLab returns uploaded PNG/MP4 files as application/octet-stream. The reproduction's configured login host differs from GitLab's canonical repository URL.

Related work

#11374 implements the fix. #6600 describes the related GitHub image problem; #10775 is the existing GitHub-specific proposal.

Searched existing GitLab image reports before filing; no matching bug report found.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions