Changesets: MantisBT

master-1.3.x 1b32685b

2016-09-02 15:49

Jenolan

Committer: vboctor


Details Diff
Issue 0021659 fix for PHP Parse error: syntax error, unexpected 'version' (T_STRING) in browser_search_plugin.php on line 56 Affected Issues
0021659
mod - browser_search_plugin.php Diff File

master 968f83a9

2016-09-01 06:30

dregad

Committer: vboctor


Details Diff
Do not set HSTS header

Enabling HTTP Strict-Transport-Security should be a decision made by the
system administrator, and implemented at server level, probably
site-wide and not just for MantisBT's PHP files.

Furthermore, Mantis setting this header causes issues if it is already
set for the server (invalid header), and may have unwanted side effects
as described in 0021262.

This reverts the change implemented to resolve issue 0012881.

Fixes 0021262
Affected Issues
0012881, 0021262
mod - core/http_api.php Diff File

master-1.3.x 2e7fac44

2016-09-01 06:30

dregad

Committer: vboctor


Details Diff
Do not set HSTS header

Enabling HTTP Strict-Transport-Security should be a decision made by the
system administrator, and implemented at server level, probably
site-wide and not just for MantisBT's PHP files.

Furthermore, Mantis setting this header causes issues if it is already
set for the server (invalid header), and may have unwanted side effects
as described in 0021262.

This reverts the change implemented to resolve issue 0012881.

Fixes 0021262
Affected Issues
0012881, 0021262
mod - core/http_api.php Diff File

master-1.3.x fb35359b

2016-09-01 06:16

dregad


Details Diff
helper_array_transpose() only handles bidimensional arrays

The function now triggers an error if the input array is not
bidimensional.

This fixes the issues introduced by earlier attempt (see commit
eaa7286a87ec5bce9320807c18df542427989f68, reverted in dd39f53bb009f1172a312c6ccbb8d4dbd6984e21).

The original did not properly handle associative arrays, and had faulty
logic causing the function to always fail for arrays. It also did not
detect some "non-square" arrays (i.e. with the 1st element as array and
the 2nd as scalar).

Fixes 0017325
Affected Issues
0017325
mod - core/helper_api.php Diff File

master-1.3.x eaa7286a

2016-09-01 06:16

dregad


Details Diff
helper_array_transpose() only handles bidimentional arrays

Fixes 0017325
Affected Issues
0017325
mod - core/helper_api.php Diff File

master-1.3.x 6e0801d3

2016-08-30 15:19

cproensa

Committer: dregad


Details Diff
Dont break complex threshold in workflow config page

The configuration option "set_status_threshold" may contain complex
thresholds defined as arrays instead of integer values.
In this case, on manage_config_workflow_page, show those fields as not
editable.

Fixes: 0021655, 0021656
Affected Issues
0021655, 0021656
mod - manage_config_workflow_page.php Diff File
mod - manage_config_workflow_set.php Diff File

master f6ef6d9e

2016-08-28 04:17

cproensa

Committer: vboctor


Details Diff
Do not use FILTER_PROPERTY_HIDE_STATUS for timeline

To match previous behaviour of Timeline, do not hide bugs based on any
status, even if the default empty filter is configured to do so.

Fixes: 0021652
Affected Issues
0021652
mod - core/timeline_api.php Diff File

master-1.3.x 820c6e15

2016-08-28 04:17

cproensa


Details Diff
Do not use FILTER_PROPERTY_HIDE_STATUS for timeline

To match previous behaviour of Timeline, do not hide bugs based on any
status, even if the default empty filter is configured to do so.

Fixes: 0021652
Affected Issues
0021652
mod - core/timeline_api.php Diff File

master-1.3.x 29d359f6

2016-08-27 20:48

vboctor


Details Diff
Update version to 1.3.1
mod - core/constant_inc.php Diff File

master 05a9a9c5

2016-08-27 19:53

vboctor


Details Diff
Handle custom main menu options with FQDN

Issue 0021397
Issue 0021414
Affected Issues
0021397, 0021414
mod - core/layout_api.php Diff File

master 4e6b44de

2016-08-27 15:43

vboctor


Details Diff
Merge remote-tracking branch 'origin/master-1.3.x'

# Conflicts:
# core/http_api.php
mod - core/http_api.php Diff File

master-1.3.x df605e1d

2016-08-27 15:40

vboctor


Details Diff
Fix CSP errors

- jQuery UI loads images from ajax.googleapis.com.
- JS Calendar control does unsafe eval, whitelisting until we replace this control.
mod - core/http_api.php Diff File

master 75303848

2016-08-27 15:24

vboctor


Details Diff
Enable inline script on View Issue for Dropzone

This is a temporary fix until 0021651 is fixed.

Fixes 0021650
Affected Issues
0021650
mod - core/http_api.php Diff File

master 043ed4f0

2016-08-27 15:07

vboctor


Details Diff
Merge remote-tracking branch 'origin/master-1.3.x'
mod - config_defaults_inc.php Diff File
mod - core/category_api.php Diff File
mod - core/custom_field_api.php Diff File
mod - core/database_api.php Diff File
mod - core/email_queue_api.php Diff File
mod - core/filter_api.php Diff File
mod - core/history_api.php Diff File
mod - csv_export.php Diff File
mod - doc/CREDITS Diff File
mod - docbook/Admin_Guide/en-US/Revision_History.xml Diff File
mod - docbook/Admin_Guide/en-US/config/filters.xml Diff File
mod - docbook/Admin_Guide/publican.cfg Diff File
mod - docbook/Developers_Guide/en-US/Revision_History.xml Diff File
mod - docbook/Developers_Guide/publican.cfg Diff File
mod - excel_xml_export.php Diff File
mod - manage_user_prune.php Diff File

master b65f4474

2016-08-27 15:05

Carlos Proensa


Details Diff
Clean up unneeded code in view_all_set.php

The code deleted here was moved into filter_api.php, filter_gpc_get()
mod - view_all_set.php Diff File

master 133c109f

2016-08-27 15:02

vboctor


Details Diff
White list CDN sources in CSP header

Fixes 0021650
Affected Issues
0021650
mod - core/http_api.php Diff File
mod - plugins/MantisGraph/MantisGraph.php Diff File

master df3d0bcf

2016-08-27 14:47

vboctor


Details Diff
Enable security headers

It was disabled in the 2.0.0-beta.1 release,
re-enabling it.

Fixes 0021650
Affected Issues
0021650
mod - core/http_api.php Diff File

master-1.3.x a38a28ff

2016-08-27 14:32

dregad


Details Diff
Prepare docbooks for 1.3.1 release
mod - docbook/Admin_Guide/en-US/Revision_History.xml Diff File
mod - docbook/Admin_Guide/publican.cfg Diff File
mod - docbook/Developers_Guide/en-US/Revision_History.xml Diff File
mod - docbook/Developers_Guide/publican.cfg Diff File

master-1.3.x 590599e7

2016-08-27 14:18

dregad


Details Diff
Update CREDITS

Added syncguru to developers; fix typo in rombert's name
mod - doc/CREDITS Diff File

master 7192eb06

2016-08-27 14:02

dregad


Details Diff
Hide 'My Account' in menu for protected users

Fixes 0021644
Affected Issues
0021644
mod - core/layout_api.php Diff File

master b27ddc48

2016-08-27 13:05

dregad


Details Diff
Merge remote-tracking branch 'origin/master-1.3.x'
mod - core.php Diff File
mod - core/events_inc.php Diff File
mod - core/http_api.php Diff File
mod - docbook/Developers_Guide/en-US/Events_Reference.xml Diff File
mod - plugins/Gravatar/Gravatar.php Diff File

master-1.3.x b3511d2f

2016-08-27 13:01

dregad


Details Diff
Fix weakened CSP by Gravatar plugin

Merge vboctor's branch 'issue_21263_csp_headers_13x'

Fixes 0021263
Affected Issues
0021263
mod - core.php Diff File
mod - core/events_inc.php Diff File
mod - core/http_api.php Diff File
mod - docbook/Developers_Guide/en-US/Events_Reference.xml Diff File
mod - plugins/Gravatar/Gravatar.php Diff File

master 23694bc2

2016-08-26 20:28

vboctor


Details Diff
Update version to 2.0.0-beta.2
mod - core/constant_inc.php Diff File

master 57c48be5

2016-08-26 20:28

vboctor


Details Diff
Update credits file
mod - doc/CREDITS Diff File

master 4bd8b5cd

2016-08-26 19:34

vboctor


Details Diff
Merge remote-tracking branch 'origin/master-1.3.x'

# Conflicts:
# bug_revision_view_page.php
mod - bug_revision_view_page.php Diff File
mod - core/bug_api.php Diff File
mod - core/filter_api.php Diff File
mod - core/print_api.php Diff File
mod - core/user_api.php Diff File
 First  Prev  1 2 3 ... 70 ... 140 ... 202 203 204 205 206 207 208 ... 210 ... 280 ... 350 ... 420 ... 490 ... 560 ... 630 ... 700 ... 729 730 731  Next  Last