MantisBT: master 20cd415e

Diff Back to Repository
Author Committer Branch Timestamp Parent
dregad community master 2022-05-16 08:51 master 1aa2f6f0
Affected Issues  0022224: Access Restrictions to "Print Reports", "CSV Export", "Excel Export" in view all bugs page
 0025492: Printing (print_all_bug_page) is a perf/security risk
Changeset

Restrict access to Export and Print Reports

Adds 2 new config options to control access restrictions to these View
Issues page functionalities:

  • CSV/Excel Export ($g_export_issues_threshold)
  • Print Reports ($g_print_reports_threshold)

The default value for print_reports_threshold is UPDATER, to reduce the
risk of denial of service attacks overloading the server via multiple
concurrent executions of print_all_bug_page_word.php. This changes from
earlier behavior, where access to this function was not restricted.

Fixes 0022224, 0025492,
PR https://github.com/mantisbt/mantisbt/pull/1810
mod - config_defaults_inc.php Diff File
mod - css/default.css Diff File
mod - csv_export.php Diff File
mod - docbook/Admin_Guide/en-US/config/misc.xml Diff File
mod - excel_xml_export.php Diff File
mod - lang/strings_english.txt Diff File
mod - manage_config_work_threshold_page.php Diff File
mod - manage_config_work_threshold_set.php Diff File
mod - print_all_bug_page.php Diff File
mod - print_all_bug_page_word.php Diff File
mod - view_all_inc.php Diff File