Commit e98e229b authored by Robert Speicher's avatar Robert Speicher

Update CHANGELOG.md for 10.2.8

[ci skip]
parent 7a6e8826
...@@ -435,6 +435,16 @@ entry. ...@@ -435,6 +435,16 @@ entry.
- Clean up schema of the "merge_requests" table. - Clean up schema of the "merge_requests" table.
## 10.2.8 (2018-02-07)
### Security (4 changes)
- Fix namespace access issue for GitHub, BitBucket, and GitLab.com project importers.
- Fix stored XSS in code blocks that ignore highlighting.
- Fix wilcard protected tags protecting all branches.
- Restrict Todo API mark_as_done endpoint to the user's todos only.
## 10.2.7 (2018-01-18) ## 10.2.7 (2018-01-18)
- No changes. - No changes.
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment