summaryrefslogtreecommitdiff
path: root/CHANGELOG.md
diff options
context:
space:
mode:
authorJohn Jarvis <jarv@gitlab.com>2019-08-28 17:23:35 +0200
committerJohn Jarvis <jarv@gitlab.com>2019-08-28 17:25:07 +0200
commit6a6a7edea972d5d44ea2c3adb764ca285e030efa (patch)
tree871bd53d7c07162886344dc59de0ea0e8945df6d /CHANGELOG.md
parent7c38249e9e7eb475de7ad20202f5c538bf1f780f (diff)
downloadgitlab-ce-6a6a7edea972d5d44ea2c3adb764ca285e030efa.tar.gz
Revert "Update CHANGELOG.md for 12.2.2"
This reverts commit cec9310c4ad641a760daa0394b6a8945d134dbb8.
Diffstat (limited to 'CHANGELOG.md')
-rw-r--r--CHANGELOG.md26
1 files changed, 1 insertions, 25 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 048a031cf96..e3389af08b9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,31 +4,7 @@ entry.
## 12.2.2
-### Security (22 changes)
-
-- Ensure only authorised users can create notes on Merge Requests and Issues.
-- Gitaly: ignore git redirects.
-- Add :login_recaptcha_protection_enabled setting to prevent bots from brute-force attacks.
-- Speed up regexp in namespace format by failing fast after reaching maximum namespace depth.
-- Limit the size of issuable description and comments.
-- Send TODOs for comments on commits correctly.
-- Restrict MergeRequests#test_reports to authenticated users with read-access on Builds.
-- Added image proxy to mitigate potential stealing of IP addresses.
-- Filter out old system notes for epics in notes api endpoint response.
-- Avoid exposing unaccessible repo data upon GFM post processing.
-- Fix HTML injection for label description.
-- Make sure HTML text is always escaped when replacing label/milestone references.
-- Prevent DNS rebind on JIRA service integration.
-- Use admin_group authorization in Groups::RunnersController.
-- Prevent disclosure of merge request ID via email.
-- Show cross-referenced MR-id in issues' activities only to authorized users.
-- Enforce max chars and max render time in markdown math.
-- Check permissions before responding in MergeController#pipeline_status.
-- Remove EXIF from users/personal snippet uploads.
-- Fix project import restricted visibility bypass via API.
-- Fix weak session management by clearing password reset tokens after login (username/email) are updated.
-- Fix SSRF via DNS rebinding in Kubernetes Integration.
-
+- Unreleased due to QA failure.
## 12.2.1