GitLab v11.11.7 Release Notes
Release Date: 2019-07-29 // almost 5 years ago-
🔒 Security (9 changes)
- 🌲 Restrict slash commands to users who can log in.
- Patch XSS issue in wiki links.
- 🔀 Filter merge request params on the new merge request page.
- 🛠 Fix Server Side Request Forgery mitigation bypass.
- 0️⃣ Show badges if pipelines are public otherwise default to project permissions.
- Do not allow localhost url redirection in GitHub Integration.
- 🚚 Do not show moved issue id for users that cannot read issue.
- 🔀 Use source project as permissions reference for MergeRequestsController#pipelines.
- ⬇️ Drop feature to take ownership of trigger token.