Changesets: MantisBT

master 3363f907

2009-12-05 09:09

dhx


Details Diff
Fix 0011260: Attribute injection/XSS in permalink_page.php

HTML attribute injection via:
permalink_page.php?url=%22%20style=%22display:none%22

This is a possible XSS issue, although <script> tags don't have any
direct effect. It's still possible to use CSS to do naughty things.
Affected Issues
0011260
mod - permalink_page.php Diff File

master-1.2.x ef0b66b4

2009-12-04 15:54

jreese


Details Diff
Added indexes to tag tables
mod - admin/schema.php Diff File

master 5763eb7e

2009-12-04 15:54

jreese


Details Diff
Added indexes to tag tables
mod - admin/schema.php Diff File

master-1.2.x 03d54d98

2009-12-03 17:49

jreese


Details Diff
Implemented multi-part plugin dependency checks

Plugins can now declare multi-part version dependencies, separating
parts with commas. This allows plugins to declare both a minimum and
maximum version dependency at the same time, or potentially multiple
minimum and maximum parts.

Also, for consistency with other plugin dependency systems (such as
Mozilla's), the plugin manager has moved from a less-than to a
less-than-or-equal dependency measure, to easily specify the highest
known-compatible version in a dependency declaration. As part of this,
dependencies can use either the existing "< XYZ" or a more-correct
"<= XYZ" string, and both will be interpreted as lte.
mod - core/plugin_api.php Diff File

master 3991a0a7

2009-12-03 17:49

jreese


Details Diff
Implemented multi-part plugin dependency checks

Plugins can now declare multi-part version dependencies, separating
parts with commas. This allows plugins to declare both a minimum and
maximum version dependency at the same time, or potentially multiple
minimum and maximum parts.

Also, for consistency with other plugin dependency systems (such as
Mozilla's), the plugin manager has moved from a less-than to a
less-than-or-equal dependency measure, to easily specify the highest
known-compatible version in a dependency declaration. As part of this,
dependencies can use either the existing "< XYZ" or a more-correct
"<= XYZ" string, and both will be interpreted as lte.
mod - core/plugin_api.php Diff File

master-1.2.x c0f84e15

2009-12-03 17:17

rombert


Details Diff
Fixes 0011215: tns:AttachmentData download_url does not encode ampersands Affected Issues
0011215
mod - api/soap/mc_project_api.php Diff File
mod - api/soap/mc_issue_api.php Diff File

master 1690847b

2009-12-03 17:17

rombert


Details Diff
Fixes 0011215: tns:AttachmentData download_url does not encode ampersands Affected Issues
0011215
mod - api/soap/mc_issue_api.php Diff File
mod - api/soap/mc_project_api.php Diff File

master-1.2.x 8ee16840

2009-12-03 15:23

jreese


Details Diff
Documented plugin configuration.
mod - docbook/developers/en/plugins-building.sgml Diff File

master b0f99a7b

2009-12-03 15:23

jreese


Details Diff
Documented plugin configuration.
mod - docbook/developers/en/plugins-building.sgml Diff File

master-1.2.x edcc93f8

2009-12-03 14:26

jreese


Details Diff
Documented plugin events and hooks.
mod - docbook/developers/en/plugins-building.sgml Diff File

master acb89edc

2009-12-03 14:26

jreese


Details Diff
Documented plugin events and hooks.
mod - docbook/developers/en/plugins-building.sgml Diff File

master-1.2.x 455606c8

2009-12-03 14:25

jreese


Details Diff
Documented plugin pages and files.
mod - docbook/developers/en/plugins-building.sgml Diff File

master 7414c5b8

2009-12-03 14:25

jreese


Details Diff
Documented plugin pages and files.
mod - docbook/developers/en/plugins-building.sgml Diff File

master-1.2.x 52b3a40a

2009-12-03 12:02

jreese


Details Diff
Fix 0011065: Fix internal admin guide links Affected Issues
0011065
mod - docbook/adminguide/en/installation.sgml Diff File
mod - docbook/adminguide/en/page_descriptions.sgml Diff File
mod - docbook/adminguide/en/authentication.sgml Diff File
mod - docbook/adminguide/en/configuration.sgml Diff File

master bb5e03c5

2009-12-03 12:02

jreese


Details Diff
Fix 0011065: Fix internal admin guide links Affected Issues
0011065
mod - docbook/adminguide/en/installation.sgml Diff File
mod - docbook/adminguide/en/page_descriptions.sgml Diff File
mod - docbook/adminguide/en/authentication.sgml Diff File
mod - docbook/adminguide/en/configuration.sgml Diff File

master-1.2.x 0fff6e7e

2009-12-03 11:48

jreese


Details Diff
Issue 0011065: Add admin guide chapter/section ids Affected Issues
0011065
mod - docbook/adminguide/en/workflow.sgml Diff File
mod - docbook/adminguide/en/configuration.sgml Diff File
mod - docbook/adminguide/en/authentication.sgml Diff File
mod - docbook/adminguide/en/page_descriptions.sgml Diff File
mod - docbook/adminguide/en/contributing.sgml Diff File
mod - docbook/adminguide/en/about.sgml Diff File
mod - docbook/adminguide/en/installation.sgml Diff File
mod - docbook/adminguide/en/customizing_mantis.sgml Diff File
mod - docbook/adminguide/en/project_management.sgml Diff File
mod - docbook/adminguide/en/user_management.sgml Diff File

master 28e4cbb5

2009-12-03 11:48

jreese


Details Diff
Issue 0011065: Add admin guide chapter/section ids Affected Issues
0011065
mod - docbook/adminguide/en/workflow.sgml Diff File
mod - docbook/adminguide/en/configuration.sgml Diff File
mod - docbook/adminguide/en/authentication.sgml Diff File
mod - docbook/adminguide/en/page_descriptions.sgml Diff File
mod - docbook/adminguide/en/contributing.sgml Diff File
mod - docbook/adminguide/en/about.sgml Diff File
mod - docbook/adminguide/en/installation.sgml Diff File
mod - docbook/adminguide/en/customizing_mantis.sgml Diff File
mod - docbook/adminguide/en/project_management.sgml Diff File
mod - docbook/adminguide/en/user_management.sgml Diff File

master-1.2.x 0085bcd7

2009-12-03 09:33

jreese


Details Diff
Fix 0011031, 10930: fix anonymous user auto-login

The original issue with 10930 was that user verification, when checking
to see if a user was logged in, would trigger automatic login of the
anonymous user account, which would lead to a redirect loop, where each
page load would auto-login the anonymous user and immediately log them
out and redirect.

The original fix for this disabled auto-login of the anonymous user
account when calling auth_is_user_authenticated(), which broke
expectations of much of the codebase. By re-enabling auto-login, but
offering optional bypass of this process, it fixes both issues.

Any page expecting to correctly work with unauthenticated users will
need to pass a False parameter to the function to bypass automatic
anonymous login.
Affected Issues
0010930, 0011031
mod - verify.php Diff File
mod - core/authentication_api.php Diff File

master aa042ae6

2009-12-03 09:33

jreese


Details Diff
Fix 0011031, 10930: fix anonymous user auto-login

The original issue with 10930 was that user verification, when checking
to see if a user was logged in, would trigger automatic login of the
anonymous user account, which would lead to a redirect loop, where each
page load would auto-login the anonymous user and immediately log them
out and redirect.

The original fix for this disabled auto-login of the anonymous user
account when calling auth_is_user_authenticated(), which broke
expectations of much of the codebase. By re-enabling auto-login, but
offering optional bypass of this process, it fixes both issues.

Any page expecting to correctly work with unauthenticated users will
need to pass a False parameter to the function to bypass automatic
anonymous login.
Affected Issues
0010930, 0011031
mod - verify.php Diff File
mod - core/authentication_api.php Diff File

master-1.2.x 53428442

2009-12-03 08:57

jreese


Details Diff
Fix 0011253: Projection column not shown correctly Affected Issues
0011253
mod - core/columns_api.php Diff File

master 09b1691c

2009-12-03 08:57

jreese


Details Diff
Fix 0011253: Projection column not shown correctly Affected Issues
0011253
mod - core/columns_api.php Diff File

master-1.2.x 5c05c074

2009-12-01 22:13

vboctor


Details Diff
Fixes 0011099: Signup email notifications are not encoded correctly. Affected Issues
0011099
mod - core/email_api.php Diff File

master 0dc5580d

2009-12-01 22:13

vboctor


Details Diff
Fixes 0011099: Signup email notifications are not encoded correctly. Affected Issues
0011099
mod - core/email_api.php Diff File

master-1.2.x 2515b365

2009-12-01 06:44

dhx


Details Diff
Fix 0011223: RSS image has execute permission bits set

/images/rss.png has the execute permission bits set incorrectly. Thanks
to cor3huis for reporting this bug.
Affected Issues
0011223

master e95b87a3

2009-12-01 06:44

dhx


Details Diff
Fix 0011223: RSS image has execute permission bits set

/images/rss.png has the execute permission bits set incorrectly. Thanks
to cor3huis for reporting this bug.
Affected Issues
0011223
 First  Prev  1 2 3 ... 80 ... 160 ... 240 ... 320 ... 400 ... 480 ... 502 503 504 505 506 507 508 ... 560 ... 640 ... 720 ... 762 763 764  Next  Last