gitlab-org--gitlab-foss/changelogs/unreleased/html-safe-diff-line-content.yml

---
title: Don't accidentally mark unsafe diff lines as HTML safe
merge_request: 
author:
Merge branch 'html-safe-diff-line-content' into 'security' Don't accidentally mark unsafe diff lines as HTML safe Fixes potential XSS issue when a legacy diff note is created on a merge request whose diff contained HTML See https://gitlab.com/gitlab-org/gitlab-ce/issues/25249 See merge request !2040 2016-12-02 03:48:32 -05:00			`---`
			`title: Don't accidentally mark unsafe diff lines as HTML safe`
			`merge_request:`
			`author:`