Commit 9afc6928 authored by GitLab Release Tools Bot's avatar GitLab Release Tools Bot

Update CHANGELOG.md for 11.11.6

[ci skip]
parent 5bdb9976
......@@ -2,6 +2,21 @@
documentation](doc/development/changelog.md) for instructions on adding your own
entry.
## 11.11.6
### Security (9 changes)
- Restrict slash commands to users who can log in.
- Patch XSS issue in wiki links.
- Filter merge request params on the new merge request page.
- Fix Server Side Request Forgery mitigation bypass.
- Show badges if pipelines are public otherwise default to project permissions.
- Do not allow localhost url redirection in GitHub Integration.
- Do not show moved issue id for users that cannot read issue.
- Use source project as permissions reference for MergeRequestsController#pipelines.
- Drop feature to take ownership of trigger token.
## 11.11.5 (2019-06-27)
- No changes.
......
---
title: Restrict slash commands to users who can log in
merge_request:
author:
type: security
---
title: Patch XSS issue in wiki links
merge_request:
author:
type: security
---
title: Filter merge request params on the new merge request page
merge_request:
author:
type: security
---
title: Fix Server Side Request Forgery mitigation bypass
merge_request:
author:
type: security
---
title: Show badges if pipelines are public otherwise default to project permissions.
erge_request:
author:
type: security
---
title: Do not allow localhost url redirection in GitHub Integration
merge_request:
author:
type: security
---
title: Do not show moved issue id for users that cannot read issue
merge_request:
author:
type: security
---
title: Use source project as permissions reference for MergeRequestsController#pipelines
merge_request:
author:
type: security
---
title: Drop feature to take ownership of trigger token.
merge_request:
author:
type: security
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment