Source Control Integration

master-1.2.x ad39d083 2010-04-22 10:01 jreese Details Diff	Fix 0011829: Missing event EVENT_MENU_MANAGE_CONFIG	Affected Issues 0011829
	mod - core/html_api.php	Diff File
master 71166a79 2010-04-22 10:01 jreese Details Diff	Fix 0011829: Missing event EVENT_MENU_MANAGE_CONFIG	Affected Issues 0011829
	mod - core/html_api.php	Diff File
master-1.2.x d2e05d3e 2010-04-22 04:26 dhx Details Diff	Issue 0011825: Support X-Content-Security-Policy (CSP) Firefox 3.7 supports a new security mechanism called Content Security Policy (CSP) that acts as a layer to prevent XSS, CSRF and clickjacking attacks. We can ensure that MantisBT doesn't load any files (images, scripts, etc) from external domains by using CSP. The exception to this rule at the moment is the use of Gravatar for user avatar support in MantisBT. CSP also allows us to limit the domains which can include MantisBT within an iframe, helping prevent clickjacking attacks. At the moment we don't allow MantisBT to be included in any iframes from any domain. In the future we'll need to create a mechanism for plugins to notify MantisBT of other domains that are safe to load external data from.	Affected Issues 0011825
	mod - core/http_api.php	Diff File
master 517cd271 2010-04-22 04:26 dhx Details Diff	Issue 0011825: Support X-Content-Security-Policy (CSP) Firefox 3.7 supports a new security mechanism called Content Security Policy (CSP) that acts as a layer to prevent XSS, CSRF and clickjacking attacks. We can ensure that MantisBT doesn't load any files (images, scripts, etc) from external domains by using CSP. The exception to this rule at the moment is the use of Gravatar for user avatar support in MantisBT. CSP also allows us to limit the domains which can include MantisBT within an iframe, helping prevent clickjacking attacks. At the moment we don't allow MantisBT to be included in any iframes from any domain. In the future we'll need to create a mechanism for plugins to notify MantisBT of other domains that are safe to load external data from.	Affected Issues 0011825
	mod - core/http_api.php	Diff File
master-1.2.x 3cd065de 2010-04-22 04:02 dhx Details Diff	Issue 0011824: Implement X-Frame-Options clickjacking protection The X-Frame-Options header can help prevent clickjacking attacks against MantisBT installations by preventing MantisBT from being loaded inside an iframe. Currently the following browsers support X-Frame-Options: * IE8+ * Opera 10.50+ * Safari 4+ * Chrome 4.1.249.1042+ * Firefox with NoScript	Affected Issues 0011824
	mod - core/http_api.php	Diff File
master d9db796f 2010-04-22 04:02 dhx Details Diff	Issue 0011824: Implement X-Frame-Options clickjacking protection The X-Frame-Options header can help prevent clickjacking attacks against MantisBT installations by preventing MantisBT from being loaded inside an iframe. Currently the following browsers support X-Frame-Options: * IE8+ * Opera 10.50+ * Safari 4+ * Chrome 4.1.249.1042+ * Firefox with NoScript	Affected Issues 0011824
	mod - core/http_api.php	Diff File
master-1.2.x dfeddb5e 2010-04-21 14:42 siebrand Details Diff	Localisation updates from translatewiki.net (2010-04-21) Signed-off-by: Siebrand Mazeland <s.mazeland@xs4all.nl>
	mod - lang/strings_hebrew.txt	Diff File
	mod - lang/strings_portuguese_standard.txt	Diff File
master-1.2.x 94619c40 2010-04-21 09:27 rombert Details Diff	Use the correct default value for sponsorship_total Fixes 0011819: Mylyn Mantis Task Update Failure	Affected Issues 0011819
	mod - api/soap/mc_issue_api.php	Diff File
master e4902b65 2010-04-21 09:27 rombert Details Diff	Use the correct default value for sponsorship_total Fixes 0011819: Mylyn Mantis Task Update Failure	Affected Issues 0011819
	mod - api/soap/mc_issue_api.php	Diff File
master-1.2.x 1a1c9762 2010-04-21 08:43 dhx Details Diff	Fix 0011394: No email sent for lost password process When a MantisBT installation is setup without anonymous access enabled auth_get_current_user_id() will fail, redirecting the user back to the login screen. This was due to a problem in user_pref_get() where it was assumed that a user was logged in. For the lost password recovery step (with no anonymous login), the lost password recovery step happens without any user logged in.	Affected Issues 0011394
	mod - core/user_pref_api.php	Diff File
master 2e73850a 2010-04-21 08:43 dhx Details Diff	Fix 0011394: No email sent for lost password process When a MantisBT installation is setup without anonymous access enabled auth_get_current_user_id() will fail, redirecting the user back to the login screen. This was due to a problem in user_pref_get() where it was assumed that a user was logged in. For the lost password recovery step (with no anonymous login), the lost password recovery step happens without any user logged in.	Affected Issues 0011394
	mod - core/user_pref_api.php	Diff File
master-1.2.x bc978309 2010-04-20 12:15 jreese Details Diff	Fix potential error loop with output plugins In cases where a plugin hooks the page layout events, and encounters an error that halts execution, the error API will inadvertantly trigger the plugin's error a second time while generating the error output. This can potentially lead to a fatal PHP error instead of an error message. To fix this, the event API gains a new function to clear all callbacks hooked to all events. This allows the error API to safely generate output without plugin hooks being called.
	mod - core/event_api.php	Diff File
	mod - core/error_api.php	Diff File
master 2b20ecf7 2010-04-20 12:15 jreese Details Diff	Fix potential error loop with output plugins In cases where a plugin hooks the page layout events, and encounters an error that halts execution, the error API will inadvertantly trigger the plugin's error a second time while generating the error output. This can potentially lead to a fatal PHP error instead of an error message. To fix this, the event API gains a new function to clear all callbacks hooked to all events. This allows the error API to safely generate output without plugin hooks being called.
	mod - core/error_api.php	Diff File
	mod - core/event_api.php	Diff File
master-1.2.x 0ae56c08 2010-04-19 12:12 jreese Details Diff	Fix 0011813: Filters error with deleted projects	Affected Issues 0011813
	mod - core/filter_api.php	Diff File
master 79255f6b 2010-04-19 12:12 jreese Details Diff	Fix 0011813: Filters error with deleted projects	Affected Issues 0011813
	mod - core/filter_api.php	Diff File
master-1.2.x de11008f 2010-04-19 10:49 jreese Details Diff	Issue 0011812: Missed adding an API param	Affected Issues 0011812
	mod - core/project_api.php	Diff File
master 4ec992b0 2010-04-19 10:49 jreese Details Diff	Issue 0011812: Missed adding an API param	Affected Issues 0011812
	mod - core/project_api.php	Diff File
master-1.2.x e249d237 2010-04-19 10:43 jreese Details Diff	Fix 0011812: Unknown project errors This fix updates the project_api to allow project_get_name to pass the trigger_errors parameter up to project_cache_row, so that pages like configuration report won't stop working if there is one bad row. This also fixes the error triggered by project_cache_row so that it sets the project ID string parameter before triggering the error.	Affected Issues 0011812
	mod - core/project_api.php	Diff File
	mod - adm_config_report.php	Diff File
master 956fe6bf 2010-04-19 10:43 jreese Details Diff	Fix 0011812: Unknown project errors This fix updates the project_api to allow project_get_name to pass the trigger_errors parameter up to project_cache_row, so that pages like configuration report won't stop working if there is one bad row. This also fixes the error triggered by project_cache_row so that it sets the project ID string parameter before triggering the error.	Affected Issues 0011812
	mod - core/project_api.php	Diff File
	mod - adm_config_report.php	Diff File
master-1.2.x 0fc80e9f 2010-04-19 09:28 jreese Details Diff	Fix 0011534: Incorrect path/short_path detection Rather than attempting to try and decipher the path and short_path by comparing the file's location on the filesytem with the document_root, MantisBT should be looking at the PHP_SELF server var provided by PHP. This variable is based on the current URL used to access the file, and is not confused by symlinks or the document_root pointing directly to the installation. It is also much simpler than the old method. Tested on Linux and Windows with the following setups: - installed as subdomain, eg http://mantis.host/foo.php - installed in subdirectory, eg http://host/mantisbt/foo.php - accessed by symlink (Linux), eg http://host/mantis/foo.php where /var/www/mantis -> /usr/share/mantisbt	Affected Issues 0011534
	mod - config_defaults_inc.php	Diff File
master 5ac1fdf3 2010-04-19 09:28 jreese Details Diff	Fix 0011534: Incorrect path/short_path detection Rather than attempting to try and decipher the path and short_path by comparing the file's location on the filesytem with the document_root, MantisBT should be looking at the PHP_SELF server var provided by PHP. This variable is based on the current URL used to access the file, and is not confused by symlinks or the document_root pointing directly to the installation. It is also much simpler than the old method. Tested on Linux and Windows with the following setups: - installed as subdomain, eg http://mantis.host/foo.php - installed in subdirectory, eg http://host/mantisbt/foo.php - accessed by symlink (Linux), eg http://host/mantis/foo.php where /var/www/mantis -> /usr/share/mantisbt	Affected Issues 0011534
	mod - config_defaults_inc.php	Diff File
master-1.2.x 2844524b 2010-04-18 17:45 siebrand Details Diff	Localisation updates from translatewiki.net (2010-04-18) Signed-off-by: Siebrand Mazeland <s.mazeland@xs4all.nl>
	mod - lang/strings_dutch.txt	Diff File
	mod - lang/strings_macedonian.txt	Diff File
	mod - plugins/MantisGraph/lang/strings_norwegian_bokmal.txt	Diff File
	mod - plugins/MantisCoreFormatting/lang/strings_norwegian_bokmal.txt	Diff File
	mod - lang/strings_finnish.txt	Diff File
	mod - lang/strings_chinese_simplified.txt	Diff File
	mod - lang/strings_ukrainian.txt	Diff File
	mod - lang/strings_hungarian.txt	Diff File
	mod - lang/strings_russian.txt	Diff File
	mod - lang/strings_slovene.txt	Diff File
	mod - lang/strings_german.txt	Diff File
	mod - lang/strings_italian.txt	Diff File
	mod - lang/strings_hebrew.txt	Diff File
	mod - lang/strings_galician.txt	Diff File
	add - plugins/MantisCoreFormatting/lang/strings_finnish.txt	Diff File
	mod - lang/strings_catalan.txt	Diff File
	mod - lang/strings_polish.txt	Diff File
	mod - lang/strings_french.txt	Diff File
	mod - lang/strings_portuguese_standard.txt	Diff File
	mod - plugins/XmlImportExport/lang/strings_norwegian_bokmal.txt	Diff File
	mod - lang/strings_spanish.txt	Diff File
	mod - lang/strings_swissgerman.txt	Diff File
	mod - lang/strings_norwegian_bokmal.txt	Diff File
	mod - lang/strings_breton.txt	Diff File
master-1.2.x f579b8c0 2010-04-16 09:23 Matt McCutchen Committer: jreese Details Diff	Fix 0011803: Use <?php instead of <? tags	Affected Issues 0011803
	mod - admin/system_utils.php	Diff File
	mod - manage_user_page.php	Diff File
master 00a114d0 2010-04-16 09:23 Matt McCutchen Committer: jreese Details Diff	Fix 0011803: Use <?php instead of <? tags	Affected Issues 0011803
	mod - admin/system_utils.php	Diff File
	mod - manage_user_page.php	Diff File
master 79489f70 2010-04-16 00:44 mattmccutchen Committer: dregad Details Diff	Allow mass update of 'Product Version' field Implement an option to update the 'Product Version' field for multiple bugs at once in view.php, similar to existing options for 'Target' and 'Fixed in' version fields. Signed-off-by: Damien Regad <dregad@mantisbt.org> Matt's original commit was ported to master branch and modified to add a missing e-mail notification (e28272287a33a80642b8a7cb50d4d2111aa3ef1a). Fixes 0011802	Affected Issues 0011802
	mod - bug_actiongroup.php	Diff File
	mod - bug_actiongroup_page.php	Diff File
	mod - core/bug_group_action_api.php	Diff File
	mod - lang/strings_english.txt	Diff File

Changesets: MantisBT