Update CHANGELOG.md for 8.16.9

[ci skip]
This commit is contained in:
DJ Mountney 2017-04-05 18:02:21 -07:00
parent 11b350ee00
commit 5fde7c6c3b

View file

@ -549,6 +549,14 @@ entry.
- Remove deprecated GitlabCiService.
- Requeue pending deletion projects.
## 8.16.9 (2017-04-05)
- Dont show source project name when user does not have access.
- Remove the class attribute from the whitelist for HTML generated from Markdown.
- Fix path disclosure in project import/export.
- Fix for open redirect vulnerability using continue[to] in URL when requesting project import status.
- Fix for open redirect vulnerabilities in todos, issues, and MR controllers.
## 8.16.8 (2017-03-19)
- Only show public emails in atom feeds.