diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2018-11-18 11:58:33 +0000 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2018-11-18 11:58:33 +0000 |
| commit | 23c87753db6e05c7439bd8f480949e59074ca4b7 (patch) | |
| tree | 20c569e32f9e1146f5dafe91693a3dc6ea29bf1c | |
| parent | c1c45a978e3b510ada33cc11171ffbe70da210cd (diff) | |
| download | gitlab-ce-23c87753db6e05c7439bd8f480949e59074ca4b7.tar.gz | |
Update CHANGELOG.md for 11.3.10
[ci skip]
| -rw-r--r-- | CHANGELOG.md | 7 | ||||
| -rw-r--r-- | changelogs/unreleased/security-11-3-2717-xss-username-autocomplete.yml | 5 |
2 files changed, 7 insertions, 5 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index dae1f5e5d30..00ade269250 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,13 @@ documentation](doc/development/changelog.md) for instructions on adding your own entry. +## 11.3.10 (2018-11-18) + +### Security (1 change) + +- Escape user fullname while rendering autocomplete template to prevent XSS. + + ## 11.3.9 (2018-10-31) ### Security (1 change) diff --git a/changelogs/unreleased/security-11-3-2717-xss-username-autocomplete.yml b/changelogs/unreleased/security-11-3-2717-xss-username-autocomplete.yml deleted file mode 100644 index d9b1015eeb4..00000000000 --- a/changelogs/unreleased/security-11-3-2717-xss-username-autocomplete.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Escape user fullname while rendering autocomplete template to prevent XSS -merge_request: -author: -type: security |