diff options
| author | GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com> | 2020-07-01 13:00:26 +0000 |
|---|---|---|
| committer | GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com> | 2020-07-01 13:00:26 +0000 |
| commit | bce8c3d7fac804d40dedcbe830b784d67a8b33d3 (patch) | |
| tree | 56effb026216285bccd88831a5b343679be66650 /CHANGELOG.md | |
| parent | 3644e9b388b299f8506b6be7793b493a54cf00b5 (diff) | |
| download | gitlab-ce-bce8c3d7fac804d40dedcbe830b784d67a8b33d3.tar.gz | |
Update CHANGELOG.md for 13.1.2
[ci skip]
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 94d635c30e0..aa8b386d8b7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,30 @@ documentation](doc/development/changelog.md) for instructions on adding your own entry. +## 13.1.2 (2020-07-01) + +### Security (18 changes) + +- Update xterm js dependency to latest stable 3.x version. +- Do not show activity for users with private profiles. +- Fix stored XSS in markdown renderer. +- Upgrade swagger-ui to solve XSS issues. +- Fix group deploy token API authorizations. +- Check access when sending TODOs related to merge requests. +- Change from hybrid to JSON cookies serializer. +- Prevent XSS in group name validations. +- Disable caching for wiki attachments. +- Disable Github Importer API by settings. +- Fix null byte error in upload path. +- Update permissions for time tracking endpoints. +- Add snippet repository validation after bundle import. +- Update Kaminari gem. +- Fix note author name rendering. +- Sanitize bitbucket repo urls to mitigate XSS. +- Stored XSS on the Error Tracking page. +- Fix security issue when rendering issuable. + + ## 13.1.1 (2020-06-23) ### Fixed (4 changes) |