Gitlab CI v13.1.2 Release Notes
Release Date: 2020-07-01 // almost 4 years ago-
🔒 Security (18 changes)
- ⚡️ Update xterm js dependency to latest stable 3.x version.
- Do not show activity for users with private profiles.
- 🛠 Fix stored XSS in markdown renderer.
- ⬆️ Upgrade swagger-ui to solve XSS issues.
- 🛠 Fix group deploy token API authorizations.
- 🔀 Check access when sending TODOs related to merge requests.
- 🔄 Change from hybrid to JSON cookies serializer.
- Prevent XSS in group name validations.
- Disable caching for wiki attachments.
- Disable Github Importer API by settings.
- 🛠 Fix null byte error in upload path.
- ⚡️ Update permissions for time tracking endpoints.
- ➕ Add snippet repository validation after bundle import.
- ⚡️ Update Kaminari gem.
- 🛠 Fix note author name rendering.
- Sanitize bitbucket repo urls to mitigate XSS.
- Stored XSS on the Error Tracking page.
- 🛠 Fix security issue when rendering issuable.