[ci skip]

[ci skip]

[11.4] Security kubeclient ssrf

See merge request gitlab/gitlabhq!2573

[ci skip]

[ci skip]

[ci skip]

[11.4] Fix Token lookup for Git over HTTP and registry authentication

See merge request gitlab/gitlabhq!2577

[ci skip]

[ci skip]

[ci skip]

Block additional localhost addresses in UrlBlocker

See merge request gitlab/gitlabhq!2487

[11.4] [EE] Escape issue title while template rendering to prevent XSS

See merge request gitlab/gitlab-ee!707

[11.4][EE] Redact unsubscribe links in issuable texts

See merge request gitlab/gitlab-ee!704

[11.4] Unauthorized user can delete protected branch's merge access levels and push access levels

See merge request gitlab/gitlab-ee!699

[11.4] Escape issue title while template rendering to prevent XSS

See merge request gitlab/gitlabhq!2571

[11.4] Redact unsubscribe links in issuable texts

See merge request gitlab/gitlabhq!2565

: [11.4] Resolve "Sensitive information is stored in browser history"

See merge request gitlab/gitlabhq!2562

[11.4] Validate Wiki attachments are valid temporary files

See merge request gitlab/gitlabhq!2569

[11.4] JUnit test reports endpoint exposes full stack trace in production mode

See merge request gitlab/gitlabhq!2517

[11.4] Persist only SHA digest of PersonalAccessToken#token

See merge request gitlab/gitlabhq!2551

[ci skip]

[ci skip]

[ci skip]

[11.4] Prevent SSRF attacks in HipChat integration

See merge request gitlab/gitlab-ee!690

[11.4] Fix XSS in Security Reports and License Management

See merge request gitlab/gitlab-ee!687

[11.4] Fix XSS in MR source branch name

See merge request gitlab/gitlabhq!2550

[11.4] Prevent SSRF attacks in HipChat integration

See merge request gitlab/gitlabhq!2547