diff options
| author | Paul Slaughter <pslaughter@gitlab.com> | 2019-02-26 08:43:43 -0600 |
|---|---|---|
| committer | Paul Slaughter <pslaughter@gitlab.com> | 2019-03-07 01:54:16 -0600 |
| commit | e6e9c10ee1be86301db02cbf7d0e833b2ef6e073 (patch) | |
| tree | ded9edefeb95c1b8f6209d0c500f9576d452d943 /changelogs | |
| parent | f944971b0bad25014a846d296057b2e89a6a340c (diff) | |
| download | gitlab-ce-e6e9c10ee1be86301db02cbf7d0e833b2ef6e073.tar.gz | |
Fix XSS in resolve conflicts form
The issue arose when the branch name contained Vue template
JavaScript. The fix is to use `v-pre` which disables Vue
compilation in a template.
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/security-56927-xss-resolve-conflicts-branch-name.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-56927-xss-resolve-conflicts-branch-name.yml b/changelogs/unreleased/security-56927-xss-resolve-conflicts-branch-name.yml new file mode 100644 index 00000000000..f92d2c0dcb1 --- /dev/null +++ b/changelogs/unreleased/security-56927-xss-resolve-conflicts-branch-name.yml @@ -0,0 +1,5 @@ +--- +title: Fix XSS in resolve conflicts form +merge_request: +author: +type: security |