diff options
author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2018-08-27 12:04:47 +0000 |
---|---|---|
committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2018-08-27 12:04:47 +0000 |
commit | f51493c8fb8b6fac489dd4984219b0c6e93ef0cd (patch) | |
tree | 017826427afd7451a201da49fd001eb04924f66a /CHANGELOG.md | |
parent | d1aef1f14deb6663589034d7b66ea1a60ee1e4a8 (diff) | |
download | gitlab-ce-f51493c8fb8b6fac489dd4984219b0c6e93ef0cd.tar.gz |
Update CHANGELOG.md for 11.0.6
[ci skip]
Diffstat (limited to 'CHANGELOG.md')
-rw-r--r-- | CHANGELOG.md | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index b9a2fca9ce5..078395b110d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -545,6 +545,19 @@ entry. - Use monospaced font for MR diff commit link ref on GFM. +## 11.0.6 (2018-08-27) + +### Security (3 changes) + +- Fixed persistent XSS rendering/escaping of diff location lines. +- Adding CSRF protection to Hooks resend action. +- Block link-local addresses in URLBlocker. + +### Fixed (1 change, 1 of them is from the community) + +- Sanitize git URL in import errors. (Jamie Schembri) + + ## 11.0.5 (2018-07-26) ### Security (4 changes) |