diff options
| author | Kushal Pandya <kushal@gitlab.com> | 2018-11-12 14:59:59 +0530 |
|---|---|---|
| committer | Kushal Pandya <kushal@gitlab.com> | 2018-11-12 16:31:16 +0530 |
| commit | 62be457fbb9cf6f16fcbc8020fdbc43fb03003f4 (patch) | |
| tree | 763009cbaaed60db355c08b5685e336a541930a8 /changelogs/unreleased | |
| parent | 117072d45f7fbcc375bec66758f5187f2a0de3ea (diff) | |
| download | gitlab-ce-62be457fbb9cf6f16fcbc8020fdbc43fb03003f4.tar.gz | |
Add changelog entry
Diffstat (limited to 'changelogs/unreleased')
| -rw-r--r-- | changelogs/unreleased/security-2717-xss-username-autocomplete.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-2717-xss-username-autocomplete.yml b/changelogs/unreleased/security-2717-xss-username-autocomplete.yml new file mode 100644 index 00000000000..d9b1015eeb4 --- /dev/null +++ b/changelogs/unreleased/security-2717-xss-username-autocomplete.yml @@ -0,0 +1,5 @@ +--- +title: Escape user fullname while rendering autocomplete template to prevent XSS +merge_request: +author: +type: security |