Changesets: MantisBT

master-2.22 14cd147d

2019-09-22 02:20

dregad


Details Diff
Replace maxcdn by stackpath in CSP headers
mod - core/http_api.php Diff File

master-1.3.x 040b81dc

2019-09-22 01:13

dregad


Details Diff
Travis: ignore errors caused by 'apt-get update'
mod - scripts/travis_before_script.sh Diff File

master eb8494d8

2019-09-22 00:21

dregad


Details Diff
Merge branch 'master-2.22'
mod - core/constant_inc.php Diff File
mod - core/layout_api.php Diff File
rm - js/bootstrap-3.4.0.min.js Diff
add - js/bootstrap-3.4.1.min.js Diff File

master 4c52fa00

2019-09-21 20:21

cproensa

Committer: dregad


Details Diff
Use max length property of custom field in inputs

When a string, or text, type custom field has a max length defined, we
should use that for the rendered input in the form, to limit the width
of the input.

Fixes: 0026141
Affected Issues
0026141
mod - core/cfdefs/cfdef_standard.php Diff File

master 20e2e5fd

2019-09-21 16:44

dregad


Details Diff
Remove unused variable
mod - core/html_api.php Diff File

master c5b85055

2019-09-21 16:38

dregad


Details Diff
Remove unused language string

Follow-up on ea3c13cc573b68bc715c069ad354091881f86f01, that string was
missed.
mod - plugins/MantisGraph/lang/strings_eo.txt Diff File

master 1436e536

2019-09-21 16:21

cproensa

Committer: dregad


Details Diff
Clean up duplicated query call

Move the call to `file_get_visible_attachments()` outside of the loop,
to avoid duplicated database queries.

Fixes: 0026167
Affected Issues
0026167
mod - api/soap/mc_issue_api.php Diff File

master 668a9b1e

2019-09-21 16:17

cproensa

Committer: dregad


Details Diff
Cache custom fields in mc_issue_api

Preload custom field data into cache to avoid repeated database queries.

Fixes: 0026166
Affected Issues
0026166
mod - api/soap/mc_issue_api.php Diff File

master f07fea0d

2019-09-21 16:10

dregad


Details Diff
Fix circular dependencies in Relationship Graph

In the case where we have a cycle in parent-child relationships (i.e.
A -> B -> C -> A), the Relationship Graph fails with an INTERNAL
APPLICATION ERROR - Argument 1 passed to relgraph_add_child() must be of
type array, string given in core/relationship_graph_api.php line 427.

The recursive call was passing the bug id instead of the bug list.

Fixes 0011381
Affected Issues
0011381
mod - core/relationship_graph_api.php Diff File

master 6568294a

2019-09-21 15:49

dregad


Details Diff
Adjust relationship graph to avoid nodes overlap

When the labels include the issue's Summary, they become much bigger
causing the graph's nodes to overlap.

Tweaking the graph's attributes avoids this, at the expense of a
slightly larger image.

Fixes 0017594
Affected Issues
0017594
mod - core/relationship_graph_api.php Diff File

master ec616fd3

2019-09-21 15:32

dregad


Details Diff
Relationship Graphs allow display of Issue Summary

A new Show/Hide Summary button lets the user choose whether they want to
see just the Issue ID, or also the Summary. In that case, the text is
truncated to an arbitrary 30 characters, to avoid the node boxes being
too wide.

Fixes 0017594
Affected Issues
0017594
mod - bug_relationship_graph.php Diff File
mod - bug_relationship_graph_img.php Diff File
mod - core/relationship_graph_api.php Diff File
mod - lang/strings_english.txt Diff File

master 89b126e1

2019-09-21 13:44

dregad


Details Diff
New EVENT_MENU_ISSUE_RELATIONSHIP event

Allows plugins to add new links to the menu under the Relationships
section in the View Issue Details page.

Fixes 0011365
Affected Issues
0011365
mod - bug_view_inc.php Diff File
mod - core/events_inc.php Diff File
mod - docbook/Developers_Guide/en-US/Events_Reference_Output.xml Diff File

master 3cc4ce9b

2019-09-21 12:15

dregad


Details Diff
Remove unnecessary markup
mod - bug_view_inc.php Diff File

master 44dd7abe

2019-09-21 11:18

dregad


Details Diff
Remove redundant relationship graph lang strings

There is no need to maintain 2 sets of strings for relationship graphs
(one for buttons, and one for page title).

Moreover, there was an inconsistency for relationship graph between the
button label ("Relation Graph") and title ("Relationship Graph").

Fixes 0026165
Affected Issues
0026165
mod - bug_relationship_graph.php Diff File
mod - lang/strings_english.txt Diff File

master 443e47ca

2019-09-21 11:04

dregad


Details Diff
Modern-UI look for Relationship Graph page

Fixes 0026163, 0026164
Affected Issues
0026163, 0026164
mod - bug_relationship_graph.php Diff File

master fa538d1d

2019-09-21 08:14

dregad


Details Diff
Merge branch 'master-2.22'
mod - config_defaults_inc.php Diff File
mod - core/graphviz_api.php Diff File

master-1.3.x 7092573f

2019-09-21 08:10

dregad


Details Diff
Prevent arbitrary shell command execution

Prior to this, Administrators were able to edit 'dot_tool' and
'neato_tool' config options from the Manage Configuration Page

These can now only be set in the config_inc.php file.

Fixes 0026162, CVE-2019-15715

Backported from fc7668c8e45db55fc3a4b991ea99d2b80861a14c.
Affected Issues
0026162
mod - config_defaults_inc.php Diff File

master-1.3.x cebfb9ac

2019-09-21 08:02

dregad


Details Diff
Escape GraphViz command before calling proc_open()

Fixes 0026162, CVE-2019-15715

(cherry picked from commit 5fb979604d88c630343b3eaf2b435cd41918c501)
Affected Issues
0026162
mod - core/graphviz_api.php Diff File

master 5fb97960

2019-09-21 08:02

dregad


Details Diff
Escape GraphViz command before calling proc_open()

Fixes 0026091, CVE-2019-15715
Affected Issues
0026091
mod - core/graphviz_api.php Diff File

master 72ff745b

2019-09-20 07:04

dregad


Details Diff
Change Bootstrap & FontAwesome CDN

According to the official download pages, these libraries switched from
Max CDN to StackPath (as the latter bought the former).
mod - core/layout_api.php Diff File

master 1e2a3018

2019-09-20 07:00

dregad


Details Diff
Update Bootstrap to 3.4.1

Original css files were modified to remove the # on the source map file.
This prevents warnings in the browser console.

Fixes 0026160, CVE-2019-8331
Affected Issues
0026160
mod - core/constant_inc.php Diff File
rm - js/bootstrap-3.4.0.min.js Diff
add - js/bootstrap-3.4.1.min.js Diff File

master f3b4e39b

2019-09-16 08:57

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_persian.txt Diff File
mod - lang/strings_zazaki.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_zazaki.txt Diff File

master aa429d33

2019-09-15 23:59

dregad


Details Diff
Also display "monitors" section if issue not monitored

The "Users monitoring this issue" section was only displayed when there
is at least one user monitoring the issue.

Includes fixes to PR review comments by @vboctor
- Fix check of force_readonly option
- "Belt & braces" when processing list of monitoring users

Fixes 0026125
Affected Issues
0026125
mod - bug_view_inc.php Diff File
mod - core/commands/IssueViewPageCommand.php Diff File

master c1076a52

2019-09-15 10:11

dregad


Details Diff
Refactor manage_plugin_page with objects

Added a new class hierarchy, with one class for each plugin status
(Available, Installed, Invalid):

- PluginForDisplay (abstract parent class)
- AvailablePlugin
- InstalledPlugin
- InvalidPluginForDisplay

Each class takes care of populating column data for display from raw
plugin data as appropriate, and provides an internal method to render
the columns.

This avoids code duplication in the main page, and simplifies the
ListPluginsForDisplay class which now only provides methods to build,
count and print lists of plugins for each status.
mod - manage_plugin_page.php Diff File

master b8ee31e4

2019-09-15 09:47

dregad


Details Diff
PHPDoc for plugin_api

- Improve global plugin cache variables doc
- Fix return types
- add missing block for plugin_log_event()
mod - core/plugin_api.php Diff File
 First  Prev  1 2 3 ... 70 ... 120 121 122 123 124 125 126 ... 140 ... 210 ... 280 ... 350 ... 420 ... 490 ... 560 ... 630 ... 700 ... 746 747 748  Next  Last