GitLab: Group search leaks private MRs, code, commits

Summary Using the group search you can access MRs and code set as "not public" in a project Steps to reproduce Create a public group, create a public project inside the group, but with private code. Push some code, search in the group search the code while logged out, you will find it also if it...