Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
0
Merge Requests
0
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
Boxiang Sun
gitlab-ce
Commits
b3cca6f5
Commit
b3cca6f5
authored
Jul 29, 2019
by
Robert Speicher
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Revert "Update CHANGELOG.md for 11.11.6"
This reverts commit
9afc6928
.
parent
9a996b3f
Changes
10
Hide whitespace changes
Inline
Side-by-side
Showing
10 changed files
with
45 additions
and
15 deletions
+45
-15
CHANGELOG.md
CHANGELOG.md
+0
-15
changelogs/unreleased/security-2873-blocked-user-slash-command-bypass-master.yml
...ecurity-2873-blocked-user-slash-command-bypass-master.yml
+5
-0
changelogs/unreleased/security-60143-patch-additional-xss-vector-in-wikis.yml
...d/security-60143-patch-additional-xss-vector-in-wikis.yml
+5
-0
changelogs/unreleased/security-bvl-filter-mr-params.yml
changelogs/unreleased/security-bvl-filter-mr-params.yml
+5
-0
changelogs/unreleased/security-dns-ssrf-bypass.yml
changelogs/unreleased/security-dns-ssrf-bypass.yml
+5
-0
changelogs/unreleased/security-fix-badges-leaked-to-unauthorized-users.yml
...ased/security-fix-badges-leaked-to-unauthorized-users.yml
+5
-0
changelogs/unreleased/security-github-ssrf-redirect.yml
changelogs/unreleased/security-github-ssrf-redirect.yml
+5
-0
changelogs/unreleased/security-hide_moved_issue_id.yml
changelogs/unreleased/security-hide_moved_issue_id.yml
+5
-0
changelogs/unreleased/security-mr-pipeline-permissions.yml
changelogs/unreleased/security-mr-pipeline-permissions.yml
+5
-0
changelogs/unreleased/security-remove-take-trigger-ownership-feature.yml
...leased/security-remove-take-trigger-ownership-feature.yml
+5
-0
No files found.
CHANGELOG.md
View file @
b3cca6f5
...
...
@@ -2,21 +2,6 @@
documentation
](
doc/development/changelog.md
)
for instructions on adding your own
entry.
## 11.11.6
### Security (9 changes)
-
Restrict slash commands to users who can log in.
-
Patch XSS issue in wiki links.
-
Filter merge request params on the new merge request page.
-
Fix Server Side Request Forgery mitigation bypass.
-
Show badges if pipelines are public otherwise default to project permissions.
-
Do not allow localhost url redirection in GitHub Integration.
-
Do not show moved issue id for users that cannot read issue.
-
Use source project as permissions reference for MergeRequestsController#pipelines.
-
Drop feature to take ownership of trigger token.
## 11.11.5 (2019-06-27)
-
No changes.
...
...
changelogs/unreleased/security-2873-blocked-user-slash-command-bypass-master.yml
0 → 100644
View file @
b3cca6f5
---
title
:
Restrict slash commands to users who can log in
merge_request
:
author
:
type
:
security
changelogs/unreleased/security-60143-patch-additional-xss-vector-in-wikis.yml
0 → 100644
View file @
b3cca6f5
---
title
:
Patch XSS issue in wiki links
merge_request
:
author
:
type
:
security
changelogs/unreleased/security-bvl-filter-mr-params.yml
0 → 100644
View file @
b3cca6f5
---
title
:
Filter merge request params on the new merge request page
merge_request
:
author
:
type
:
security
changelogs/unreleased/security-dns-ssrf-bypass.yml
0 → 100644
View file @
b3cca6f5
---
title
:
Fix Server Side Request Forgery mitigation bypass
merge_request
:
author
:
type
:
security
changelogs/unreleased/security-fix-badges-leaked-to-unauthorized-users.yml
0 → 100644
View file @
b3cca6f5
---
title
:
Show badges if pipelines are public otherwise default to project permissions.
erge_request
:
author
:
type
:
security
changelogs/unreleased/security-github-ssrf-redirect.yml
0 → 100644
View file @
b3cca6f5
---
title
:
Do not allow localhost url redirection in GitHub Integration
merge_request
:
author
:
type
:
security
changelogs/unreleased/security-hide_moved_issue_id.yml
0 → 100644
View file @
b3cca6f5
---
title
:
Do not show moved issue id for users that cannot read issue
merge_request
:
author
:
type
:
security
changelogs/unreleased/security-mr-pipeline-permissions.yml
0 → 100644
View file @
b3cca6f5
---
title
:
Use source project as permissions reference for MergeRequestsController#pipelines
merge_request
:
author
:
type
:
security
changelogs/unreleased/security-remove-take-trigger-ownership-feature.yml
0 → 100644
View file @
b3cca6f5
---
title
:
Drop feature to take ownership of trigger token.
merge_request
:
author
:
type
:
security
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment