MantisBT: master-2.24 5595c90f

Diff Back to Repository
Author Committer Branch Timestamp Parent
dregad dregad master-2.24 2020-09-12 12:09 master-2.24 90b83956
Affected Issues  0027039: CVE-2020-25781: Access to private bug note attachments
Changeset

Functions to check view/download ability at bugnote level

2 new File API functions:

  • file_can_view_bugnote_attachments()
  • file_can_download_bugnote_attachments

Prerequisite to fix issue 0027039
mod - core/file_api.php Diff File