Changesets: MantisBT
|
master-1.3.x df42516b 2016-08-18 06:53 Committer: dregad Details Diff |
Create api function to check a threshold in several projects Add an api function to check the current user's access against the given threshold, in each of the provided projects, and return true if the user's access is equal to or higher in any of the projects, false otherwise. The provided threshold can be the config literal to be evaluated in each project's context. |
||
| mod - core/access_api.php | Diff File | ||
|
master c8fe307b 2016-08-17 03:12 Details Diff |
Merge branch 'master-1.3.x' Conflicts: core/html_api.php (resolved with change in layout_api.php) |
||
| mod - core/email_api.php | Diff File | ||
| mod - core/filter_api.php | Diff File | ||
| mod - core/history_api.php | Diff File | ||
| mod - core/layout_api.php | Diff File | ||
| mod - core/timeline_api.php | Diff File | ||
| mod - csv_export.php | Diff File | ||
| mod - excel_xml_export.php | Diff File | ||
|
master-1.3.x aa07b7e2 2016-08-17 02:55 Details Diff |
Remove trailing whitespace, break long line | ||
| mod - core/filter_api.php | Diff File | ||
|
master c5f17c92 2016-08-17 01:58 Details Diff |
Add library/ezc to .gitignore Following implementation of chartjs for graphs and removal of the ezc libraries submodules, git warns about untracked files when switching between master and older branches. Adding the library/ezc directory to .gitignore fixes the problem. |
||
| mod - .gitignore | Diff File | ||
|
master-1.3.x 9f359863 2016-08-16 22:50 Committer: dregad Details Diff |
Protect against calling http_csp_add() too late If the CSP header is sent and then http_csp_add() is called, trigger error. Fixes 0021263 |
Affected Issues 0021263 |
|
| mod - core/http_api.php | Diff File | ||
|
master-1.3.x f24a3e9c 2016-08-16 22:44 Committer: dregad Details Diff |
Use Content-Security-Policy API in Gravatar Fixes 0021263 |
Affected Issues 0021263 |
|
| mod - plugins/Gravatar/Gravatar.php | Diff File | ||
|
master-1.3.x a905dd01 2016-08-16 22:25 Committer: dregad Details Diff |
Add API for Content-Security-Policy Add APIs to allow plugins to change the Content-Security-Policy header. Fixes 0021263 |
Affected Issues 0021263 |
|
| mod - core/http_api.php | Diff File | ||
|
master 44bb87ce 2016-08-16 19:34 Committer: dregad Details Diff |
Fix styling of alert message boxes Fixes 0021622 |
Affected Issues 0021622 |
|
| mod - admin/email_queue.php | Diff File | ||
| mod - manage_proj_create_page.php | Diff File | ||
| mod - verify.php | Diff File | ||
|
master-1.3.x 3eb87ee9 2016-08-16 14:49 Details Diff |
Align documentation with phpDoc for filter configs 1. The following config options were not properly documented in config_defaults_inc.php; the corresponding description was copied from the Admin Guide: - $g_filter_by_custom_fields - $g_filter_custom_fields_per_row - $g_view_filters 2. The default and minimum value for $g_filter_custom_fields_per_row was incorrectly documented as being 7 in the Admin guide; changed to 8 to match value defined in config_defaults_inc.php (and matching actual usage in the code). |
||
| mod - config_defaults_inc.php | Diff File | ||
| mod - docbook/Admin_Guide/en-US/config/filters.xml | Diff File | ||
|
master-1.3.x 7086c2d8 2016-08-16 13:22 Details Diff |
Fix XSS in view_all_bug_page.php The value of the view_type parameter on the view_all_bug_page.php page was not encoded before being displayed. This vulnerability was discovered by Will Dollman of Netcraft Ltd. Initial patch modified to use strict comparison per Will's suggestion. Fixes 0021611 |
Affected Issues 0021611 |
|
| mod - core/filter_api.php | Diff File | ||
|
master ce3ad65b 2016-08-16 12:48 Details Diff |
Call function layout_page_begin with right number of parameters | ||
| mod - manage_user_impersonate.php | Diff File | ||
|
master-1.3.x 218ffb3b 2016-08-16 05:19 Details Diff |
Timeline: get history based on filter Fixes https://github.com/mantisbt/mantisbt/pull/838 |
||
| mod - core/filter_api.php | Diff File | ||
| mod - core/history_api.php | Diff File | ||
| mod - core/timeline_api.php | Diff File | ||
|
master-1.3.x c7bb7f7a 2016-08-16 05:19 Committer: dregad Details Diff |
bug_get_bugnote_stats_array(), code clean up | ||
| mod - core/bug_api.php | Diff File | ||
|
master-1.3.x 06d0c7a2 2016-08-15 15:27 Committer: dregad Details Diff |
Remove unused include in excel_xml_export The page print_all_bug_options_inc.php is no longer used, as stated in Issue 0019370 |
Affected Issues 0019370 |
|
| mod - excel_xml_export.php | Diff File | ||
|
master-1.3.x b08cafe9 2016-08-15 15:22 Committer: dregad Details Diff |
Remove undeclared variables from excel, csv export The undeclared variables were introduced by error after rebasing PR from Issue 0020424 |
Affected Issues 0020424 |
|
| mod - csv_export.php | Diff File | ||
| mod - excel_xml_export.php | Diff File | ||
|
master-1.3.x b66af6d2 2016-08-15 07:35 Details Diff |
Remove stray comma Fix invalid HTML, follow-up on issue 0011964. |
Affected Issues 0011964 |
|
| mod - core/html_api.php | Diff File | ||
|
master 67be52b0 2016-08-15 07:18 Committer: dregad Details Diff |
Add missing css classes for plugins page color key Fixes 0021117 |
Affected Issues 0021117 |
|
| mod - css/default.css | Diff File | ||
|
master-1.2.x 45df5c0e 2016-08-15 04:16 Details Diff |
Bump version and prepare 1.2.20 release | ||
| mod - core/constant_inc.php | Diff File | ||
| mod - doc/CREDITS | Diff File | ||
| mod - doc/RELEASE | Diff File | ||
|
master 49d57adf 2016-08-14 18:03 Committer: dregad Details Diff |
Fix column headers and text alignment in Summary page Fixes 0021119 |
Affected Issues 0021119 |
|
| mod - core/summary_api.php | Diff File | ||
| mod - summary_page.php | Diff File | ||
|
master d7aa38b7 2016-08-14 16:27 Committer: dregad Details Diff |
Fix attachment icon in print bug page Fixes 0021139 |
Affected Issues 0021139 |
|
| mod - print_bug_page.php | Diff File | ||
|
master 86efa5b7 2016-08-14 15:26 Details Diff |
Add page header to fix columns set page rendering Fixes 0021398 |
Affected Issues 0021398 |
|
| mod - manage_config_columns_set.php | Diff File | ||
|
master e1eb08b1 2016-08-14 15:13 Committer: dregad Details Diff |
Clarify the code and add comment | ||
| mod - core/html_api.php | Diff File | ||
|
master-1.3.x 77db0389 2016-08-14 14:54 Committer: vboctor Details Diff |
Use multiple tokens for bug revision page As discussed in 0021610, actions presented as links should generate separate form security tokens. This commit fixes the drop revision links for bug_revision_view_page Fixes: 0021610 |
Affected Issues 0021610 |
|
| mod - bug_revision_view_page.php | Diff File | ||
|
master-1.3.x f160663f 2016-08-14 14:25 Committer: vboctor Details Diff |
Revert multiple tokens for attachement delete links Revert the logic introduced by fix for Issue 0020142, in which one single form security token is used for all action links. The side effect is that only one of those actions can be performed from the specific originating page. This is especially a drawback when the actions are links that can be open in new browsers tabs. Reverting to separate tokens allows to perform all the actions without having to reload the originating page. Note, the original performance issue was solved at the session layer with 8092c3d. Fixes: 0021610 |
Affected Issues 0020142, 0021610 |
|
| mod - core/print_api.php | Diff File | ||
|
master d430e28f 2016-08-14 12:44 Details Diff |
Remove wrong PHP closing tag Fixes 0021609 |
Affected Issues 0021609 |
|
| mod - news_update.php | Diff File | ||
