diff options
| author | Rémy Coutable <remy@rymai.me> | 2016-05-18 07:31:12 +0300 |
|---|---|---|
| committer | Rémy Coutable <remy@rymai.me> | 2016-05-18 07:31:12 +0300 |
| commit | da8ac1635f1c12e9455e7517bee29678c754d492 (patch) | |
| tree | 0e3986128d3f36847372eca4954fb696acfa0af7 /CHANGELOG | |
| parent | 98d88e8188f551533390ca9dcb1247e5af6807cf (diff) | |
| parent | 5bf49bb63d88b1cce2d9a44716b54acfa63ea657 (diff) | |
Merge branch 'issue_17302' into 'master'
Fix api leaking notes when user is not authorized to read noteable
fixes #17302
See merge request !4102
Diffstat (limited to 'CHANGELOG')
| -rw-r--r-- | CHANGELOG | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/CHANGELOG b/CHANGELOG index bafdc8dbc8e..48e38899607 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -21,6 +21,7 @@ v 8.8.0 (unreleased) - Bump mail_room to 0.7.0 to fix stuck IDLE connections - Remove future dates from contribution calendar graph. - Support e-mail notifications for comments on project snippets + - Fix API leak of notes of unauthorized issues, snippets and merge requests - Use ActionDispatch Remote IP for Akismet checking - Fix error when visiting commit builds page before build was updated - Add 'l' shortcut to open Label dropdown on issuables and 'i' to create new issue on a project |