diff options
author | John Jarvis <jarv@gitlab.com> | 2019-08-28 17:23:35 +0200 |
---|---|---|
committer | John Jarvis <jarv@gitlab.com> | 2019-08-28 17:25:07 +0200 |
commit | 6a6a7edea972d5d44ea2c3adb764ca285e030efa (patch) | |
tree | 871bd53d7c07162886344dc59de0ea0e8945df6d /CHANGELOG.md | |
parent | 7c38249e9e7eb475de7ad20202f5c538bf1f780f (diff) | |
download | gitlab-ce-6a6a7edea972d5d44ea2c3adb764ca285e030efa.tar.gz |
Revert "Update CHANGELOG.md for 12.2.2"
This reverts commit cec9310c4ad641a760daa0394b6a8945d134dbb8.
Diffstat (limited to 'CHANGELOG.md')
-rw-r--r-- | CHANGELOG.md | 26 |
1 files changed, 1 insertions, 25 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 048a031cf96..e3389af08b9 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,31 +4,7 @@ entry. ## 12.2.2 -### Security (22 changes) - -- Ensure only authorised users can create notes on Merge Requests and Issues. -- Gitaly: ignore git redirects. -- Add :login_recaptcha_protection_enabled setting to prevent bots from brute-force attacks. -- Speed up regexp in namespace format by failing fast after reaching maximum namespace depth. -- Limit the size of issuable description and comments. -- Send TODOs for comments on commits correctly. -- Restrict MergeRequests#test_reports to authenticated users with read-access on Builds. -- Added image proxy to mitigate potential stealing of IP addresses. -- Filter out old system notes for epics in notes api endpoint response. -- Avoid exposing unaccessible repo data upon GFM post processing. -- Fix HTML injection for label description. -- Make sure HTML text is always escaped when replacing label/milestone references. -- Prevent DNS rebind on JIRA service integration. -- Use admin_group authorization in Groups::RunnersController. -- Prevent disclosure of merge request ID via email. -- Show cross-referenced MR-id in issues' activities only to authorized users. -- Enforce max chars and max render time in markdown math. -- Check permissions before responding in MergeController#pipeline_status. -- Remove EXIF from users/personal snippet uploads. -- Fix project import restricted visibility bypass via API. -- Fix weak session management by clearing password reset tokens after login (username/email) are updated. -- Fix SSRF via DNS rebinding in Kubernetes Integration. - +- Unreleased due to QA failure. ## 12.2.1 |