diff --git a/CHANGELOG.md b/CHANGELOG.md index e514a42108c5780608b7c4193b1c8bfcfd7bba06..609de42383aa20ec52f1fcbd95953e96a7d9455f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -249,6 +249,18 @@ entry. - Creates Vue component for artifacts block on job page. +## 11.2.4 (2018-09-26) + +### Security (6 changes) + +- Redact confidential events in the API. +- Set timeout for syntax highlighting. +- Sanitize JSON data properly to fix XSS on Issue details page. +- Fix stored XSS in merge requests from imported repository. +- Fix xss vulnerability sourced from package.json. +- Block loopback addresses in UrlBlocker. + + ## 11.2.3 (2018-08-28) ### Fixed (1 change)