Changesets: MantisBT

Search Browse Back to Index

master-2.28 d68d4c44

2026-05-25 08:32

dregad


Details Diff		 Refactor print_test_result()
mod - admin/install.php Diff File

master 7b4dc30e

2026-05-25 08:07

translatewiki.net


Details Diff		 Localisation updates from https://translatewiki.net. [skip ci]
mod - lang/strings_belarusian_tarask.txt Diff File
mod - lang/strings_dutch.txt Diff File
mod - lang/strings_korean.txt Diff File
mod - lang/strings_russian.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_korean.txt Diff File
mod - plugins/MantisGraph/lang/strings_belarusian_tarask.txt Diff File
mod - plugins/XmlImportExport/lang/strings_belarusian_tarask.txt Diff File

master 6c7870a5

2026-05-25 07:38

dregad


Details Diff		 PHPDoc
mod - api/soap/mc_file_api.php Diff File

master 3850e415

2026-05-25 07:36

dregad


Details Diff		 Remove redundant code in mci_file_add()

file_ensure_valid_upload_path() already does the same thing as the
if statement, since a80842fbc26b8633472eae1b22093e5b56bb114d when
trigger_error() was converted to throwing a ServiceException.
mod - api/soap/mc_file_api.php Diff File

master-2.28 78c0af63

2026-05-25 07:01

dregad


Details Diff		 Remove use of eval() in Tokenizer class

eval() was used to check syntax but the safeguard still allowed code
injection because PHP evaluates classes and functions at compile time.

Leveraging the autoloader, an attacker could achieve remote code
execution by defining a rogue ConfigsSetCommand class.

We now rely on token_get_all()'s TOKEN_PARSE flag [1] to check syntax,
which will throw a ParseError exception just like eval() does, but
without executing the code.

Fixes 0037122, GHSA-v84x-qvhg-f36r

[1]: https://www.php.net/manual/en/function.token-get-all.php		 Affected Issues
0037122
mod - core/classes/Tokenizer.class.php Diff File

master-2.28 e7041ecc

2026-05-25 06:27

dregad


Details Diff		 Code cleanup in ConfigParserTest

- Remove unused method
- Fix static analyis warnings
- Use indented NOWDOCs in the data providers
mod - tests/Mantis/ConfigParserTest.php Diff File

master 2006074b

2026-05-24 15:15

raspopov

Committer: community


Details Diff		 Fix the string_sanitize_url() lost slash again

Added comprehensive tests.

Fixes 0037133, PR https://github.com/mantisbt/mantisbt/pull/2224		 Affected Issues
0037133
mod - core/string_api.php Diff File
mod - tests/Mantis/StringTest.php Diff File

master 0ab63400

2026-05-24 12:20

raspopov

Committer: dregad


Details Diff		 Align plugin names and labels with same size
mod - css/default.css Diff File
mod - manage_plugin_page.php Diff File

master 2320edb4

2026-05-24 04:34

raspopov

Committer: dregad


Details Diff		 Add "Optional" label instead of text
mod - lang/strings_english.txt Diff File
mod - manage_plugin_page.php Diff File

master 59f25925

2026-05-21 08:05

translatewiki.net


Details Diff		 Localisation updates from https://translatewiki.net. [skip ci]
mod - lang/strings_belarusian_tarask.txt Diff File
mod - lang/strings_korean.txt Diff File
mod - plugins/Gravatar/lang/strings_dutch.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_korean.txt Diff File

master b2875a89

2026-05-20 12:02

raspopov

Committer: dregad


Details Diff		 Display all plugin dependencies including optional ones
mod - manage_plugin_page.php Diff File

master a8e8b56a

2026-05-20 08:52

dregad


Details Diff		 PHPDoc: tag old constants with @deprecated

This allows compatible IDEs to flag them in the code.
mod - core/constant_inc.php Diff File

master a9d08573

2026-05-18 18:51

dregad


Details Diff		 Improve Issue Trends filter page layout

Use standard MantisBT UI
mod - plugins/MantisGraph/core/Period.php Diff File
mod - plugins/MantisGraph/lang/strings_english.txt Diff File
mod - plugins/MantisGraph/pages/issues_trend_bycategory_table.php Diff File
mod - plugins/MantisGraph/pages/issues_trend_bystatus_table.php Diff File
mod - plugins/MantisGraph/pages/issues_trend_page.php Diff File

master 1b390ac8

2026-05-18 08:34

translatewiki.net


Details Diff		 Localisation updates from https://translatewiki.net. [skip ci]
mod - lang/strings_afrikaans.txt Diff File
mod - lang/strings_amharic.txt Diff File
mod - lang/strings_arabic.txt Diff File
mod - lang/strings_arabicegyptianspoken.txt Diff File
mod - lang/strings_asturian.txt Diff File
mod - lang/strings_basque.txt Diff File
mod - lang/strings_belarusian_tarask.txt Diff File
mod - lang/strings_breton.txt Diff File
mod - lang/strings_bulgarian.txt Diff File
mod - lang/strings_catalan.txt Diff File
mod - lang/strings_chinese_simplified.txt Diff File
mod - lang/strings_chinese_traditional.txt Diff File
mod - lang/strings_croatian.txt Diff File
mod - lang/strings_czech.txt Diff File
mod - lang/strings_danish.txt Diff File
mod - lang/strings_dutch.txt Diff File
mod - lang/strings_esperanto.txt Diff File
mod - lang/strings_estonian.txt Diff File
mod - lang/strings_finnish.txt Diff File
mod - lang/strings_french.txt Diff File
mod - lang/strings_galician.txt Diff File
mod - lang/strings_georgian.txt Diff File
mod - lang/strings_german.txt Diff File
mod - lang/strings_greek.txt Diff File
mod - lang/strings_hebrew.txt Diff File
mod - lang/strings_hindi.txt Diff File
mod - lang/strings_hungarian.txt Diff File
mod - lang/strings_icelandic.txt Diff File
mod - lang/strings_interlingua.txt Diff File
mod - lang/strings_italian.txt Diff File
mod - lang/strings_japanese.txt Diff File
mod - lang/strings_korean.txt Diff File
mod - lang/strings_latvian.txt Diff File
mod - lang/strings_lithuanian.txt Diff File
mod - lang/strings_luxembourgish.txt Diff File
mod - lang/strings_macedonian.txt Diff File
mod - lang/strings_norwegian_bokmal.txt Diff File
mod - lang/strings_norwegian_nynorsk.txt Diff File
mod - lang/strings_occitan.txt Diff File
mod - lang/strings_persian.txt Diff File
mod - lang/strings_polish.txt Diff File
mod - lang/strings_portuguese_brazil.txt Diff File
mod - lang/strings_portuguese_standard.txt Diff File
mod - lang/strings_qqq.txt Diff File
mod - lang/strings_ripoarisch.txt Diff File
mod - lang/strings_romanian.txt Diff File
mod - lang/strings_russian.txt Diff File
mod - lang/strings_saraiki.txt Diff File
mod - lang/strings_serbian.txt Diff File
mod - lang/strings_serbian_latin.txt Diff File
mod - lang/strings_sh-latn.txt Diff File
mod - lang/strings_slovak.txt Diff File
mod - lang/strings_slovene.txt Diff File
mod - lang/strings_spanish.txt Diff File
mod - lang/strings_swedish.txt Diff File
mod - lang/strings_swissgerman.txt Diff File
mod - lang/strings_tagalog.txt Diff File
mod - lang/strings_turkish.txt Diff File
mod - lang/strings_ukrainian.txt Diff File
mod - lang/strings_urdu.txt Diff File
mod - lang/strings_vietnamese.txt Diff File
mod - lang/strings_volapuk.txt Diff File
mod - lang/strings_zazaki.txt Diff File
mod - plugins/Gravatar/lang/strings_arabic.txt Diff File
mod - plugins/Gravatar/lang/strings_asturian.txt Diff File
mod - plugins/Gravatar/lang/strings_az.txt Diff File
mod - plugins/Gravatar/lang/strings_belarusian_tarask.txt Diff File
mod - plugins/Gravatar/lang/strings_breton.txt Diff File
mod - plugins/Gravatar/lang/strings_bulgarian.txt Diff File
mod - plugins/Gravatar/lang/strings_chinese_simplified.txt Diff File
mod - plugins/Gravatar/lang/strings_chinese_traditional.txt Diff File
mod - plugins/Gravatar/lang/strings_czech.txt Diff File
mod - plugins/Gravatar/lang/strings_danish.txt Diff File
mod - plugins/Gravatar/lang/strings_dutch.txt Diff File
mod - plugins/Gravatar/lang/strings_esperanto.txt Diff File
mod - plugins/Gravatar/lang/strings_finnish.txt Diff File
mod - plugins/Gravatar/lang/strings_french.txt Diff File
mod - plugins/Gravatar/lang/strings_galician.txt Diff File
mod - plugins/Gravatar/lang/strings_german.txt Diff File
mod - plugins/Gravatar/lang/strings_greek.txt Diff File
mod - plugins/Gravatar/lang/strings_hebrew.txt Diff File
mod - plugins/Gravatar/lang/strings_hindi.txt Diff File
mod - plugins/Gravatar/lang/strings_hungarian.txt Diff File
mod - plugins/Gravatar/lang/strings_icelandic.txt Diff File
mod - plugins/Gravatar/lang/strings_indonesian.txt Diff File
mod - plugins/Gravatar/lang/strings_interlingua.txt Diff File
mod - plugins/Gravatar/lang/strings_italian.txt Diff File
mod - plugins/Gravatar/lang/strings_japanese.txt Diff File
mod - plugins/Gravatar/lang/strings_kaa.txt Diff File
mod - plugins/Gravatar/lang/strings_korean.txt Diff File
mod - plugins/Gravatar/lang/strings_lithuanian.txt Diff File
mod - plugins/Gravatar/lang/strings_macedonian.txt Diff File
mod - plugins/Gravatar/lang/strings_norwegian_bokmal.txt Diff File
mod - plugins/Gravatar/lang/strings_persian.txt Diff File
mod - plugins/Gravatar/lang/strings_polish.txt Diff File
mod - plugins/Gravatar/lang/strings_portuguese_brazil.txt Diff File
mod - plugins/Gravatar/lang/strings_portuguese_standard.txt Diff File
mod - plugins/Gravatar/lang/strings_russian.txt Diff File
mod - plugins/Gravatar/lang/strings_saraiki.txt Diff File
mod - plugins/Gravatar/lang/strings_serbian.txt Diff File

master 45670709

2026-05-18 03:02

dregad


Details Diff		 Merge branch 'master-2.28'
mod - login_anon.php Diff File

master-2.28 c6ccd554

2026-05-18 03:00

dregad


Details Diff		 Fix anonymous login regression caused by CSRF token

Merging PR https://github.com/mantisbt/mantisbt/pull/2221, which
initially contained 2 fixes.

The first one (anonymous login) is merged by this.

The second for core/authentication_api.php (auth_reauthenticate()) was
reverted by the author following PR review, as the problem was already
fixed in Issue 0037130.

Keeping the sausage-making in Git history just in case a bug surfaces
later on.

Fixes 0037135		 Affected Issues
0037130, 0037135
mod - login_anon.php Diff File

master-2.28 110ddafe

2026-05-18 02:13

khushal


Details Diff		 Revert CSRF token seeding in auth_reauthenticate()
mod - core/authentication_api.php Diff File

master-2.28 6ad20bea

2026-05-17 12:05

dregad


Details Diff		 Fix SQL injection in history_query_result()

Sanitize $t_history_order variable so only ASC/DESC can be added to the
SQL query, defaulting to ASC (matching $g_history_order value in
config_defaults_inc.php).

Fixes 0037123, GHSA-mw6p-33vw-46cc		 Affected Issues
0037123
mod - core/history_api.php Diff File

master d67d5024

2026-05-17 11:24

dregad


Details Diff		 Move print bug jump form code to its own function

New layout_bug_jump_form() function extracted from layout_breadcrumbs().

Use printf() instead of concatenated echo for cleaner code.

Issue 0037134		 Affected Issues
0037134
mod - core/layout_api.php Diff File

master 9b0f1a52

2026-05-17 11:23

dregad


Details Diff		 Allow bug_link_tag prefix in jump to bug form

Until now, due to the use of gpc_get_int(), an error was thrown if the
user entered `#1234` in the search field, which sometimes happen when
copy/pasting e.g from a Git commit message.

As convenience, we now ignore the leading `#` (technically, the value of
$g_bug_link_tag config) and extract the bug id from the rest of the
string.

Fixes 0037134		 Affected Issues
0037134
mod - jump_to_bug.php Diff File

master ad1be12b

2026-05-17 04:51

raspopov

Committer: community


Details Diff		 Fix the string_sanitize_url() lost slash

Fixed an issue where the “/” was missing when rebuilding URLs
during sanitization.

Fixes 0037133, PR https://github.com/mantisbt/mantisbt/pull/2222		 Affected Issues
0037133
mod - core/string_api.php Diff File
mod - tests/Mantis/StringTest.php Diff File

master 78060491

2026-05-16 10:50

dregad


Details Diff		 Add GitHub pull request template for contributions
add - .github/pull_request_template.md Diff File

master c4bde635

2026-05-16 10:46

dregad


Details Diff		 Add CONTRIBUTING.md

Finalizing a draft I started in... 2016 (!)
add - CONTRIBUTING.md Diff File

master-2.28 69b03cac

2026-05-15 09:52

khushal


Details Diff		 Seed CSRF login_token on anonymous and reauthenticate redirects
mod - core/authentication_api.php Diff File
mod - login_anon.php Diff File

master 7a512868

2026-05-14 11:56

dregad


Details Diff		 Getting user info from LDAP without authentication

Removed unneeded LDAP authentication checks to enable independent
retrieval of LDAP real name and email.

Updated documentation.

Merge PR https://github.com/mantisbt/mantisbt/pull/1308
mod - account_page.php Diff File
mod - account_update.php Diff File
mod - core/commands/UserUpdateCommand.php Diff File
mod - core/user_api.php Diff File
mod - docbook/Admin_Guide/en-US/Authentication.xml Diff File
mod - docbook/Admin_Guide/en-US/Configuration.xml Diff File
mod - docbook/Admin_Guide/en-US/config/auth.xml Diff File
mod - docbook/Admin_Guide/en-US/config/email.xml Diff File
add - docbook/Admin_Guide/en-US/config/ldap.xml Diff File
mod - manage_user_create_page.php Diff File
mod - manage_user_edit_page.php Diff File
 First  Prev  1 2 3 ... 12 13 14 15 16 17 18 ... 80 ... 160 ... 240 ... 320 ... 400 ... 480 ... 560 ... 640 ... 720 ... 762 763 764  Next  Last