Changesets: MantisBT

master-1.3.x e593cdb2

2019-08-31 16:27

vboctor


Details Diff
Update release to 1.3.19
mod - core/constant_inc.php Diff File
mod - docbook/Admin_Guide/en-US/Revision_History.xml Diff File
mod - docbook/Developers_Guide/en-US/Revision_History.xml Diff File

master-2.21 9a40e29a

2019-08-31 16:26

vboctor


Details Diff
Update release to 2.21.3
mod - core/constant_inc.php Diff File
mod - docbook/Admin_Guide/en-US/Revision_History.xml Diff File
mod - docbook/Developers_Guide/en-US/Revision_History.xml Diff File

master 4e366b7d

2019-08-30 15:00

vboctor


Details Diff
Support playing video attachments inline

- Support playing video attachments inline.
- If file size within preview size, then preload it.
- Do the same relating to preloading for audio files.

Fixes 0026102
Fixes 0026095
Affected Issues
0026095, 0026102
mod - core/file_api.php Diff File
mod - core/print_api.php Diff File
mod - lang/strings_english.txt Diff File

master 27002730

2019-08-30 14:23

vboctor


Details Diff
Set file icons for audio, video, and markdown
mod - config_defaults_inc.php Diff File

master 34af70dc

2019-08-30 14:19

vboctor


Details Diff
Remove preview config option for audio formats

Fixes 0026095
Affected Issues
0026095
mod - config_defaults_inc.php Diff File
mod - core/file_api.php Diff File
mod - docbook/Admin_Guide/en-US/config/uploads.xml Diff File

master 80b88ea2

2019-08-30 07:35

dregad


Details Diff
Fix incorrect column data types in ERD

The reference database that was used to build the original diagram
(MySQL Workbench reverse engineering feature) was not a fresh install.
As a result, there were discrepancies in some data types (e.g. columns
linked to enums were VARCHAR instead of SMALLINT).

Fixes 0021799

Also added missing relationship between _bugnote_ and _bug_file_ tables
(Issue 0026098).
Affected Issues
0021799, 0026098
mod - docbook/Developers_Guide/en-US/images/erd.png Diff File
mod - docbook/erd/mantisbt.mwb Diff File
add - docbook/erd/mantisbt_2.23.0_210_erd_r2.pdf Diff File

master cc9c8ad6

2019-08-29 19:31

syncguru


Details Diff
Tweaks based on review comments & fix travis-ci
mod - bug_report_page.php Diff File
mod - bug_view_inc.php Diff File
mod - bugnote_update.php Diff File
mod - bugnote_view_inc.php Diff File
mod - core/collapse_api.php Diff File
mod - core/print_api.php Diff File
mod - core/tag_api.php Diff File
mod - css/ace-mantis.css Diff File
mod - tests/Mantis/PrepareTest.php Diff File

master a11cf463

2019-08-29 10:19

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_arabic.txt Diff File
mod - lang/strings_dutch.txt Diff File
mod - lang/strings_french.txt Diff File
mod - lang/strings_hungarian.txt Diff File
mod - lang/strings_italian.txt Diff File
mod - lang/strings_korean.txt Diff File
mod - lang/strings_portuguese_brazil.txt Diff File
mod - lang/strings_swedish.txt Diff File
mod - plugins/MantisGraph/lang/strings_dutch.txt Diff File

imgbot bc84699b

2019-08-29 03:22

ImgBotApp


Details Diff
[ImgBot] Optimize images

*Total -- 1,073.01kb -> 926.00kb (13.7%)

/images/mantis_logo.gif -- 7.63kb -> 5.69kb (25.39%)
/images/mantis_logo_notext.png -- 10.61kb -> 8.74kb (17.58%)
/docbook/Developers_Guide/en-US/images/erd.png -- 333.12kb -> 277.92kb (16.57%)
/doc/modern_view_issue.png -- 164.66kb -> 142.48kb (13.47%)
/doc/modern_my_view.png -- 297.88kb -> 258.47kb (13.23%)
/doc/modern_view_issues.png -- 203.33kb -> 177.60kb (12.66%)
/docbook/Admin_Guide/en-US/images/mantis_logo.png -- 18.59kb -> 18.37kb (1.2%)
/images/mantis_logo.png -- 18.59kb -> 18.37kb (1.2%)
/docbook/Developers_Guide/en-US/images/mantis_logo.png -- 18.59kb -> 18.37kb (1.2%)

Signed-off-by: ImgBotApp <ImgBotHelp@gmail.com>
mod - doc/modern_my_view.png Diff File
mod - doc/modern_view_issue.png Diff File
mod - doc/modern_view_issues.png Diff File
mod - docbook/Admin_Guide/en-US/images/mantis_logo.png Diff File
mod - docbook/Developers_Guide/en-US/images/erd.png Diff File
mod - docbook/Developers_Guide/en-US/images/mantis_logo.png Diff File
mod - images/mantis_logo.gif Diff File
mod - images/mantis_logo.png Diff File
mod - images/mantis_logo_notext.png Diff File

master be09c128

2019-08-29 03:12

dregad


Details Diff
Update ERD diagram to schema 210

- Reflect changes since schema 209
- Updated image for Developer's guide
- Improve README file
- Update MySQLWorkbench version
- Update download link
- Add instructions to update latest PDF symlink
- Minor formatting adjustments

Fixes 0026098
Affected Issues
0026098
mod - docbook/Developers_Guide/en-US/images/erd.png Diff File
mod - docbook/erd/README.md Diff File
mod - docbook/erd/mantisbt.mwb Diff File

master 8f7c5c9a

2019-08-28 22:27

dregad


Details Diff
Make sure g_csp['frame-ancestors'] is set
mod - core/http_api.php Diff File

master 094f536a

2019-08-28 17:32

vboctor


Details Diff
Support inlnie playing of audio attachments

Fixes 0026095
Affected Issues
0026095
mod - config_defaults_inc.php Diff File
mod - core/file_api.php Diff File
mod - core/print_api.php Diff File
mod - docbook/Admin_Guide/en-US/config/uploads.xml Diff File
mod - lang/strings_english.txt Diff File

master 6a6b83f6

2019-08-28 17:13

vboctor


Details Diff
Document config options for preview extensions

Fixes 0026096
Affected Issues
0026096
mod - docbook/Admin_Guide/en-US/config/uploads.xml Diff File

master 2d2f6f7b

2019-08-28 15:46

dregad


Details Diff
Drop CSP frame-ancestor: 'none' if other sources exist

If both 'none' and other values (e.g. 'self') are defined for the
frame-ancestor CSP directive, http_csp_value() now drops 'none', which
is the default set by MantisBT core, and can only exist by itself.

Fixes 0026093
Affected Issues
0026093
mod - core/http_api.php Diff File

master dd95276b

2019-08-28 15:07

dregad


Details Diff
Fix PHP notice when viewing issue without category

Regression from f1cf14478b4f03f355049196c2ced418eb2c1afe.

We use the Command's flag to determine whether the label must be
displayed, and additionally that the category is indeed present in the
Issue's data before trying to access it.

Fixes 0026094
Affected Issues
0026094
mod - bug_view_inc.php Diff File

master 44edc433

2019-08-28 02:42

dregad


Details Diff
Update GraphViz website URL

The references to the old AT&T website are no longer valid (404).

Fixes 0026092
Affected Issues
0026092
mod - config_defaults_inc.php Diff File
mod - core/graphviz_api.php Diff File
mod - core/relationship_graph_api.php Diff File
mod - docbook/Admin_Guide/en-US/config/relationship.xml Diff File

master fc7668c8

2019-08-28 01:39

atrol

Committer: dregad


Details Diff
Prevent arbitrary shell command execution

Prior to this, Administrators were able to edit 'dot_tool' and
'neato_tool' config options from the Manage Configuration Page

These can now only be set in the config_inc.php file.

Fixes 0026091, CVE-2019-15715

Signed-off-by: Damien Regad <dregad@mantisbt.org>

Original commit message reworded, added CVE reference.
Affected Issues
0026091
mod - config_defaults_inc.php Diff File

master 858efe4a

2019-08-26 02:21

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_danish.txt Diff File
mod - lang/strings_polish.txt Diff File

master 9d1356b3

2019-08-25 11:24

syncguru


Details Diff
Makes collapse style customizable by caller
mod - core/collapse_api.php Diff File
mod - core/print_api.php Diff File

master 7e4b9486

2019-08-25 08:42

vboctor


Details Diff
Change version to 2.23.0-dev
mod - core/constant_inc.php Diff File

master 8cf6eb5e

2019-08-25 08:28

vboctor


Details Diff
Update release to 2.22.0
mod - core/constant_inc.php Diff File
mod - doc/CREDITS Diff File
mod - docbook/Admin_Guide/en-US/Revision_History.xml Diff File
mod - docbook/Developers_Guide/en-US/Revision_History.xml Diff File

master 5f28f001

2019-08-25 03:28

dregad


Details Diff
Merge branch 'master-2.21'

# Conflicts:
# core/constant_inc.php
mod - core/constant_inc.php Diff File
mod - docbook/Admin_Guide/en-US/Revision_History.xml Diff File
mod - docbook/Developers_Guide/en-US/Revision_History.xml Diff File
mod - proj_doc_edit_page.php Diff File

master-1.3.x 796a327f

2019-08-25 01:52

atrol

Committer: dregad


Details Diff
Fix XSS on project documentation

Vulnerability in deprecated project documentation functionality
($g_enable_project_documentation), allowing execution of arbitrary
code (if CSP settings permit it) after uploading an attachment with a
crafted filename.

Prevent the attack by sanitizing the filename before display.

Fixes 0026079 (clone of issue 0026078)

(cherry picked from commit bd094dede74ff6e313e286e949e2387233a96eea)
Affected Issues
0026078, 0026079
mod - proj_doc_edit_page.php Diff File

master-2.21 bd094ded

2019-08-25 01:52

atrol

Committer: dregad


Details Diff
Fix XSS on project documentation

Vulnerability in deprecated project documentation functionality
($g_enable_project_documentation), allowing execution of arbitrary
code (if CSP settings permit it) after uploading an attachment with a
crafted filename.

Prevent the attack by sanitizing the filename before display.

Fixes 0026078
Affected Issues
0026078
mod - proj_doc_edit_page.php Diff File

master d722a833

2019-08-24 22:08

cproensa

Committer: dregad


Details Diff
Fix filter for date custom field

When a custom field of type date is used in the filter dialog, and there
are no values, for any issue, for this custom field, the filter shows an
error and don't populate the date picker.

Fixes: 0026062
Affected Issues
0026062
mod - core/filter_form_api.php Diff File
 First  Prev  1 2 3 ... 70 ... 122 123 124 125 126 127 128 ... 140 ... 210 ... 280 ... 350 ... 420 ... 490 ... 560 ... 630 ... 700 ... 745 746 747  Next  Last