Update CHANGELOG.md for 8.17.5

[ci skip]
This commit is contained in:
DJ Mountney 2017-04-05 17:57:31 -07:00
parent b821ed6fc2
commit 11b350ee00
1 changed files with 8 additions and 0 deletions

View File

@ -328,6 +328,14 @@ entry.
- Change development tanuki favicon colors to match logo color order.
- API issues - support filtering by iids.
## 8.17.5 (2017-04-05)
- Dont show source project name when user does not have access.
- Remove the class attribute from the whitelist for HTML generated from Markdown.
- Fix path disclosure in project import/export.
- Fix for open redirect vulnerability using continue[to] in URL when requesting project import status.
- Fix for open redirect vulnerabilities in todos, issues, and MR controllers.
## 8.17.4 (2017-03-19)
- Only show public emails in atom feeds.