diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2018-09-26 18:11:04 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2018-09-26 18:11:04 +0300 |
| commit | 729e1d13297039780b8f3aedc1b4617ce33785fd (patch) | |
| tree | 521fddecd773c0511e6c738f976638ed5c2b0823 /CHANGELOG.md | |
| parent | e72e9c1d58eef6e6d0ab9d681513f55aa575e8c8 (diff) | |
Update CHANGELOG.md for 11.1.7
[ci skip]
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 609de42383a..407ca3fea57 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -528,6 +528,18 @@ entry. - Moves help_popover component to a common location. +## 11.1.7 (2018-09-26) + +### Security (6 changes) + +- Redact confidential events in the API. +- Set timeout for syntax highlighting. +- Sanitize JSON data properly to fix XSS on Issue details page. +- Fix stored XSS in merge requests from imported repository. +- Fix xss vulnerability sourced from package.json. +- Block loopback addresses in UrlBlocker. + + ## 11.1.6 (2018-08-28) ### Fixed (1 change) |