Commits · v11.3.11 · Greg Messner / GitLab Community Edition · GitLab

Nov 26, 2018
- Update VERSION to 11.3.11 · 9c30391c
  GitLab Release Tools Bot authored Nov 26, 2018
  
  View commits for tag v11.3.11 v11.3.11
  
  9c30391c
- Update CHANGELOG.md for 11.3.11 · 9eff3873
  GitLab Release Tools Bot authored Nov 26, 2018
  9eff3873
- Merge branch 'security-fix-uri-xss-applications-11-3' into 'security-11-3' · 7529d554
  Steve Azzopardi authored Nov 26, 2018
  7529d554
- Merge branch 'security-11-3-fj-crlf-injection' into 'security-11-3' · f59f728f
  Steve Azzopardi authored Nov 26, 2018
  f59f728f
- [11.3] Fix CRLF issue in UrlValidator · 536b7dca
  Francisco Javier López authored Nov 26, 2018
  
  536b7dca
- Merge branch 'security-182-update-workhorse-11-3' into 'security-11-3' · 707d210b
  Steve Azzopardi authored Nov 26, 2018
  707d210b
- Merge branch 'security-11-3-fix-webhook-ssrf-ipv6' into 'security-11-3' · 4e1d9f16
  Steve Azzopardi authored Nov 26, 2018
  4e1d9f16
- Merge branch 'security-email-change-notification-11-3' into 'security-11-3' · 778d14b1
  Steve Azzopardi authored Nov 26, 2018
  778d14b1
- Merge branch 'security-guest-comments-11-3' into 'security-11-3' · 9ec0a08a
  Steve Azzopardi authored Nov 26, 2018
  9ec0a08a
- [11.3] Fixed ability to comment on and edit/delete comments on locked or confidential issues · 05922e18
  Chantal Rollison authored Nov 26, 2018
  
  05922e18
- Resolve reflected XSS in Ouath authorize window · a4092225
  James Lopez authored Oct 25, 2018
  
  a4092225
- Merge branch 'security-11-3-pages-toctou-race' into 'security-11-3' · a884c8f0
  Steve Azzopardi authored Nov 26, 2018
  a884c8f0
- Merge branch 'security-fix-pat-web-access-11-3' into 'security-11-3' · 7a7f505f
  Steve Azzopardi authored Nov 26, 2018
  7a7f505f
Nov 23, 2018
- Update to gitlab-workhorse 6.1.2 · 4613c0bc
  Steve Xuereb authored Nov 23, 2018
  4613c0bc
- Merge branch... · 5a26a1ea
  Steve Azzopardi authored Nov 23, 2018
  5a26a1ea
- Merge branch 'security-mermaid-xss-11-3' into 'security-11-3' · d0dadd3b
  Steve Azzopardi authored Nov 23, 2018
  d0dadd3b
- Merge branch 'security-bvl-exposure-in-commits-list-11-3' into 'security-11-3' · 7e1abc38
  Steve Azzopardi authored Nov 23, 2018
  7e1abc38
- Merge branch 'security-issue_51301-11-3' into 'security-11-3' · c63c8451
  Steve Azzopardi authored Nov 23, 2018
  c63c8451
- Merge branch 'security-2736-prometheus-ssrf-11-3' into 'security-11-3' · cc474355
  Steve Azzopardi authored Nov 23, 2018
  cc474355
- Merge branch 'security-11-3-stored-xss-for-environments' into 'security-11-3' · ecf97379
  Steve Azzopardi authored Nov 23, 2018
  ecf97379
- Merge branch '11-3-stable' into security-11-3 · ac83d643
  Steve Xuereb authored Nov 23, 2018
  
  ac83d643
- Merge branch 'security-private-group-11-3' into 'security-11-3' · 56417b96
  Steve Azzopardi authored Nov 23, 2018
  56417b96
- Update code to use API scope on PAT auth · e9dd33d3
  James Lopez authored Oct 30, 2018
  
  e9dd33d3
Nov 21, 2018
- Upgrade GitLab Pages to v1.1.1 · 8f8fa36b
  Alessio Caiazza authored Nov 19, 2018
  
  8f8fa36b
Nov 19, 2018
- Don't use fragment cache on commit page · a819f14c
  Bob Van Landuyt authored Nov 09, 2018
  a819f14c
- Configure mermaid to not render HTML content in diagrams · 0d64da48
  Winnie Hellmann authored Nov 09, 2018
  0d64da48
- Add failing test for XSS in mermaid diagrams · 58161315
  Winnie Hellmann authored Nov 09, 2018
  58161315
Nov 18, 2018
- Update VERSION to 11.3.10 · 82190ba7
  GitLab Release Tools Bot authored Nov 18, 2018
  
  View commits for tag v11.3.10 v11.3.10
  
  82190ba7
- Update CHANGELOG.md for 11.3.10 · 23c87753
  GitLab Release Tools Bot authored Nov 18, 2018
  23c87753
- Merge branch 'sh-fix-issue-54189-11-3' into 'security-11-3' · c1c45a97
  Steve Azzopardi authored Nov 18, 2018 and Steve Xuereb committed Nov 18, 2018
  c1c45a97
- Merge branch 'security-11-3-2717-xss-username-autocomplete' into 'security-11-3' · 953f789f
  Steve Azzopardi authored Nov 18, 2018 and Steve Xuereb committed Nov 18, 2018
  953f789f
- Merge branch 'sh-fix-issue-54189-11-3' into 'security-11-3' · d88c4710
  Steve Azzopardi authored Nov 18, 2018
  d88c4710
- Merge branch 'security-11-3-2717-xss-username-autocomplete' into 'security-11-3' · a2943c9e
  Steve Azzopardi authored Nov 18, 2018
  a2943c9e
- Merge branch '11-3-stable' into security-11-3 · feb93b29
  Steve Xuereb authored Nov 18, 2018
  
  feb93b29
- Prevent templated services from being imported · 4aa6ea21
  Stan Hu authored Nov 18, 2018
  4aa6ea21
Nov 16, 2018
- Sanitize output of SpacedLinkFilter · 918a7424
  Brett Walker authored Nov 09, 2018
  
  918a7424
Nov 14, 2018
- No redirects in prometheus service · 10a9060d
  Reuben Pereira authored Nov 14, 2018
  10a9060d
- Fix milestone promotion authorization · 8912721f
  Felipe authored Nov 09, 2018
  8912721f
- Validate URI scheme also for internal URI · 5fae9ea1
  Alessio Caiazza authored Nov 08, 2018
  5fae9ea1
Nov 12, 2018
- Add changelog entry · 380214b3
  Kushal Pandya authored Nov 12, 2018
  
  380214b3