Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
4605d27d
Commit
4605d27d
authored
6 years ago
by
Alessio Caiazza
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Update CHANGELOG.md for 10.7.6
[ci skip]
parent
e96b1961
Changes
1
Show whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
16 additions
and
0 deletions
+16
-0
CHANGELOG.md
CHANGELOG.md
+16
-0
No files found.
CHANGELOG.md
View file @
4605d27d
...
...
@@ -482,6 +482,22 @@ entry.
-
Gitaly handles repository forks by default.
## 10.7.6 (2018-06-21)
### Security (6 changes)
-
Fix XSS vulnerability for table of content generation.
-
Update sanitize gem to 4.6.5 to fix HTML injection vulnerability.
-
HTML escape branch name in project graphs page.
-
HTML escape the name of the user in ProjectsHelper#link_to_member.
-
Don't show events from internal projects for anonymous users in public feed.
-
XSS fix to use safe_params instead of params in url_for helpers.
### Other (1 change)
-
Replacing gollum libraries for gitlab custom libs. !18343
## 10.7.5 (2018-05-28)
### Security (3 changes)
...
...
This diff is collapsed.
Click to expand it.
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment