From f508fb8a043a4b1f996cb7ec8bba198e5b5986f5 Mon Sep 17 00:00:00 2001 From: GitLab Bot Date: Mon, 7 Dec 2020 09:37:32 +0000 Subject: Add latest changes from gitlab-org/security/gitlab@13-6-stable-ee --- changelogs/unreleased/security-290-graphql-exposed-email.yml | 5 ----- changelogs/unreleased/security-296-private_profile_exposure.yml | 5 ----- changelogs/unreleased/security-hide-email-in-confirmation-page.yml | 5 ----- changelogs/unreleased/security-idor-ff-user-list.yml | 5 ----- changelogs/unreleased/security-mermaid-rc-13-6.yml | 5 ----- .../security-prevent-short-searches-in-explore-projects.yml | 5 ----- changelogs/unreleased/security-project-import-zoom-xss.yml | 5 ----- changelogs/unreleased/security-search-term-logged.yml | 5 ----- changelogs/unreleased/security-starred-projects-api-fix.yml | 5 ----- changelogs/unreleased/security-starred-projects-private-profile.yml | 5 ----- 10 files changed, 50 deletions(-) delete mode 100644 changelogs/unreleased/security-290-graphql-exposed-email.yml delete mode 100644 changelogs/unreleased/security-296-private_profile_exposure.yml delete mode 100644 changelogs/unreleased/security-hide-email-in-confirmation-page.yml delete mode 100644 changelogs/unreleased/security-idor-ff-user-list.yml delete mode 100644 changelogs/unreleased/security-mermaid-rc-13-6.yml delete mode 100644 changelogs/unreleased/security-prevent-short-searches-in-explore-projects.yml delete mode 100644 changelogs/unreleased/security-project-import-zoom-xss.yml delete mode 100644 changelogs/unreleased/security-search-term-logged.yml delete mode 100644 changelogs/unreleased/security-starred-projects-api-fix.yml delete mode 100644 changelogs/unreleased/security-starred-projects-private-profile.yml (limited to 'changelogs') diff --git a/changelogs/unreleased/security-290-graphql-exposed-email.yml b/changelogs/unreleased/security-290-graphql-exposed-email.yml deleted file mode 100644 index 8b07bb1342f..00000000000 --- a/changelogs/unreleased/security-290-graphql-exposed-email.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: 'GraphQL User: do not expose email if set to private' -merge_request: -author: -type: security diff --git a/changelogs/unreleased/security-296-private_profile_exposure.yml b/changelogs/unreleased/security-296-private_profile_exposure.yml deleted file mode 100644 index 05d98788aed..00000000000 --- a/changelogs/unreleased/security-296-private_profile_exposure.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Ensure group and project memberships are not leaked via API for users with private profiles -merge_request: -author: -type: security diff --git a/changelogs/unreleased/security-hide-email-in-confirmation-page.yml b/changelogs/unreleased/security-hide-email-in-confirmation-page.yml deleted file mode 100644 index b8f448acfcd..00000000000 --- a/changelogs/unreleased/security-hide-email-in-confirmation-page.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Do not show emails of users in confirmation page -merge_request: -author: -type: security diff --git a/changelogs/unreleased/security-idor-ff-user-list.yml b/changelogs/unreleased/security-idor-ff-user-list.yml deleted file mode 100644 index 6d17f9af11d..00000000000 --- a/changelogs/unreleased/security-idor-ff-user-list.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Forbid setting a gitlabUserList strategy to a list from another project -merge_request: -author: -type: security diff --git a/changelogs/unreleased/security-mermaid-rc-13-6.yml b/changelogs/unreleased/security-mermaid-rc-13-6.yml deleted file mode 100644 index 10c620de108..00000000000 --- a/changelogs/unreleased/security-mermaid-rc-13-6.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Fix mermaid resource consumption in GFM fields -merge_request: -author: -type: security diff --git a/changelogs/unreleased/security-prevent-short-searches-in-explore-projects.yml b/changelogs/unreleased/security-prevent-short-searches-in-explore-projects.yml deleted file mode 100644 index 672ccc09a33..00000000000 --- a/changelogs/unreleased/security-prevent-short-searches-in-explore-projects.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Require at least 3 characters when searching for project in the Explore page -merge_request: -author: -type: security diff --git a/changelogs/unreleased/security-project-import-zoom-xss.yml b/changelogs/unreleased/security-project-import-zoom-xss.yml deleted file mode 100644 index 4f4d7f14b6b..00000000000 --- a/changelogs/unreleased/security-project-import-zoom-xss.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Validate zoom links to start with https only -merge_request: 1055 -author: -type: security diff --git a/changelogs/unreleased/security-search-term-logged.yml b/changelogs/unreleased/security-search-term-logged.yml deleted file mode 100644 index c3e9d1862bd..00000000000 --- a/changelogs/unreleased/security-search-term-logged.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Filter search parameter to prevent data leaks -merge_request: -author: -type: security diff --git a/changelogs/unreleased/security-starred-projects-api-fix.yml b/changelogs/unreleased/security-starred-projects-api-fix.yml deleted file mode 100644 index efb12998393..00000000000 --- a/changelogs/unreleased/security-starred-projects-api-fix.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Do not expose starred projects of users with private profile via API -merge_request: -author: -type: security diff --git a/changelogs/unreleased/security-starred-projects-private-profile.yml b/changelogs/unreleased/security-starred-projects-private-profile.yml deleted file mode 100644 index 1fb47dce518..00000000000 --- a/changelogs/unreleased/security-starred-projects-private-profile.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Do not show starred & contributed projects of users with private profile -merge_request: -author: -type: security -- cgit v1.2.3