diff options
| author | Jan Provaznik <jprovaznik@gitlab.com> | 2018-10-24 12:01:52 +0300 |
|---|---|---|
| committer | Thiago Presa <tpresa@gitlab.com> | 2018-10-25 04:01:31 +0300 |
| commit | 7c2086e2c7c8b91de5fcc67f52aa9b680559ac07 (patch) | |
| tree | e89b2ebdf1f9f795dd92ef4dafd964da573a524c /changelogs | |
| parent | 6dcb2c78beced3336142a53d54e644ac543c3ead (diff) | |
Merge branch 'security-11-2-2717-fix-issue-title-xss' into 'security-11-2'
[11.2] Escape issue title while template rendering to prevent XSS
See merge request gitlab/gitlabhq!2558
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/security-11-2-2717-fix-issue-title-xss.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-11-2-2717-fix-issue-title-xss.yml b/changelogs/unreleased/security-11-2-2717-fix-issue-title-xss.yml new file mode 100644 index 00000000000..346f31956f4 --- /dev/null +++ b/changelogs/unreleased/security-11-2-2717-fix-issue-title-xss.yml @@ -0,0 +1,5 @@ +--- +title: Escape entity title while autocomplete template rendering to prevent XSS +merge_request: 2558 +author: +type: security |