MantisBT: master-2.28 7a52a683

Diff Back to Repository
Author Committer Branch Timestamp Parent
dregad dregad master-2.28 2026-05-30 18:21 master-2.28 667e0640
Affected Issues  0037200: CVE-2026-52883: Injection of TIME_TRACKING and REMINDER Notes via REST and SOAP APIs
Changeset

Improve IssueUpdateTest

testUpdateWithTimeTrackingNote() is taking care of testing adding notes
with TIME_TRACKING type, so it is not needed in testUpdateWithNewNote().

testUpdateWithNewNote() now only deals with regular BUGNOTE type. A test
for adding a new note without re-posting the previous contents has been
added.

Adding a new test case testUpdateWithReminderNote() for REMINDER notes.

Issue 0037200
mod - tests/soap/IssueUpdateTest.php Diff File