From b5010f9f54ae2d32cf1c86e7b7129aa2d6633053 Mon Sep 17 00:00:00 2001
From: James Moger <james.moger@gitblit.com>
Date: Tue, 04 Nov 2014 17:12:00 -0500
Subject: [PATCH] Whitelist the "target" link attribute in the XSS filter
---
releases.moxie | 49 ++++++++++++++++++++++++++++++++++++++++++++++++-
1 files changed, 48 insertions(+), 1 deletions(-)
diff --git a/releases.moxie b/releases.moxie
index c2b633a..d98c2d4 100644
--- a/releases.moxie
+++ b/releases.moxie
@@ -1,4 +1,51 @@
#
+# ${project.version} release
+#
+r27: {
+ title: ${project.name} ${project.version} released
+ id: ${project.version}
+ date: ${project.buildDate}
+ note: ~
+ html: ~
+ text: ''
+ The new gitblit.properties file "includes" defaults.properties which is the original
+ gitblit.properties file. You may continue using your existing gitblit.properties file
+ as before, however, you might find future upgrades simpler by adopting the new "include"
+ design.
+ ''
+ security: ~
+ fixes:
+ - Fix exception when viewing a ticket with a patchset where the integration branch does not exist (issue-521, ticket-212)
+ - Fix exception when deleting a repository using the FileTicketService (issue-522, ticket-213)
+ - Do not inject team repository permissions as explicit user permissoins when editing a user (issue-462, ticket-214)
+ - Whitelist the target link attribute in the XSS filter (ticket-216)
+ changes:
+ - Replaced Dagger with Guice (ticket-80)
+ - Use release name as root directory in Gitblit GO artifacts (ticket-109)
+ - Split gitblit.properties into gitblit.properties & defaults.properties (ticket-110)
+ - Show team type in teams page (pr-217, ticket-168)
+ additions:
+ - Add GitHub Octicons (ticket-106)
+ - Support for chain-loading properties files (ticket-110)
+ - Add Priority & Severity fields for tickets (pr-220, ticket-157)
+ - Add Maintenance ticket type (pr-223, ticket-206)
+ dependencyChanges:
+ - Guice 4.0-beta4 (ticket-80)
+ - SLF4j 1.7.7 (ticket-122)
+ - gson 2.2.2 (ticket-123)
+ - Freemarker 2.3.20 (ticket-124)
+ - Lucene 4.10.0 (ticket-159)
+ contributors:
+ - James Moger
+ - David Ostrovsky
+ - Alex Lewis
+ - Florian Zschocke
+ - Paul Martin
+ - razzard
+ - Alexander Zabluda
+}
+
+#
# 1.6.2 release
#
r26: {
@@ -1556,6 +1603,6 @@
- James Moger
}
-snapshot: ~
+snapshot: &r27
release: &r26
releases: &r[1..26]
--
Gitblit v1.9.1