Changesets: MantisBT
|
master 3363f907 2009-12-05 09:09 Details Diff |
Fix 0011260: Attribute injection/XSS in permalink_page.php HTML attribute injection via: permalink_page.php?url=%22%20style=%22display:none%22 This is a possible XSS issue, although <script> tags don't have any direct effect. It's still possible to use CSS to do naughty things. |
Affected Issues 0011260 |
|
| mod - permalink_page.php | Diff File | ||
|
master-1.2.x ef0b66b4 2009-12-04 15:54 Details Diff |
Added indexes to tag tables | ||
| mod - admin/schema.php | Diff File | ||
|
master 5763eb7e 2009-12-04 15:54 Details Diff |
Added indexes to tag tables | ||
| mod - admin/schema.php | Diff File | ||
|
master-1.2.x 03d54d98 2009-12-03 17:49 Details Diff |
Implemented multi-part plugin dependency checks Plugins can now declare multi-part version dependencies, separating parts with commas. This allows plugins to declare both a minimum and maximum version dependency at the same time, or potentially multiple minimum and maximum parts. Also, for consistency with other plugin dependency systems (such as Mozilla's), the plugin manager has moved from a less-than to a less-than-or-equal dependency measure, to easily specify the highest known-compatible version in a dependency declaration. As part of this, dependencies can use either the existing "< XYZ" or a more-correct "<= XYZ" string, and both will be interpreted as lte. |
||
| mod - core/plugin_api.php | Diff File | ||
|
master 3991a0a7 2009-12-03 17:49 Details Diff |
Implemented multi-part plugin dependency checks Plugins can now declare multi-part version dependencies, separating parts with commas. This allows plugins to declare both a minimum and maximum version dependency at the same time, or potentially multiple minimum and maximum parts. Also, for consistency with other plugin dependency systems (such as Mozilla's), the plugin manager has moved from a less-than to a less-than-or-equal dependency measure, to easily specify the highest known-compatible version in a dependency declaration. As part of this, dependencies can use either the existing "< XYZ" or a more-correct "<= XYZ" string, and both will be interpreted as lte. |
||
| mod - core/plugin_api.php | Diff File | ||
|
master-1.2.x c0f84e15 2009-12-03 17:17 Details Diff |
Fixes 0011215: tns:AttachmentData download_url does not encode ampersands |
Affected Issues 0011215 |
|
| mod - api/soap/mc_project_api.php | Diff File | ||
| mod - api/soap/mc_issue_api.php | Diff File | ||
|
master 1690847b 2009-12-03 17:17 Details Diff |
Fixes 0011215: tns:AttachmentData download_url does not encode ampersands |
Affected Issues 0011215 |
|
| mod - api/soap/mc_issue_api.php | Diff File | ||
| mod - api/soap/mc_project_api.php | Diff File | ||
|
master-1.2.x 8ee16840 2009-12-03 15:23 Details Diff |
Documented plugin configuration. | ||
| mod - docbook/developers/en/plugins-building.sgml | Diff File | ||
|
master b0f99a7b 2009-12-03 15:23 Details Diff |
Documented plugin configuration. | ||
| mod - docbook/developers/en/plugins-building.sgml | Diff File | ||
|
master-1.2.x edcc93f8 2009-12-03 14:26 Details Diff |
Documented plugin events and hooks. | ||
| mod - docbook/developers/en/plugins-building.sgml | Diff File | ||
|
master acb89edc 2009-12-03 14:26 Details Diff |
Documented plugin events and hooks. | ||
| mod - docbook/developers/en/plugins-building.sgml | Diff File | ||
|
master-1.2.x 455606c8 2009-12-03 14:25 Details Diff |
Documented plugin pages and files. | ||
| mod - docbook/developers/en/plugins-building.sgml | Diff File | ||
|
master 7414c5b8 2009-12-03 14:25 Details Diff |
Documented plugin pages and files. | ||
| mod - docbook/developers/en/plugins-building.sgml | Diff File | ||
|
master-1.2.x 52b3a40a 2009-12-03 12:02 Details Diff |
Fix 0011065: Fix internal admin guide links |
Affected Issues 0011065 |
|
| mod - docbook/adminguide/en/installation.sgml | Diff File | ||
| mod - docbook/adminguide/en/page_descriptions.sgml | Diff File | ||
| mod - docbook/adminguide/en/authentication.sgml | Diff File | ||
| mod - docbook/adminguide/en/configuration.sgml | Diff File | ||
|
master bb5e03c5 2009-12-03 12:02 Details Diff |
Fix 0011065: Fix internal admin guide links |
Affected Issues 0011065 |
|
| mod - docbook/adminguide/en/installation.sgml | Diff File | ||
| mod - docbook/adminguide/en/page_descriptions.sgml | Diff File | ||
| mod - docbook/adminguide/en/authentication.sgml | Diff File | ||
| mod - docbook/adminguide/en/configuration.sgml | Diff File | ||
|
master-1.2.x 0fff6e7e 2009-12-03 11:48 Details Diff |
Issue 0011065: Add admin guide chapter/section ids |
Affected Issues 0011065 |
|
| mod - docbook/adminguide/en/workflow.sgml | Diff File | ||
| mod - docbook/adminguide/en/configuration.sgml | Diff File | ||
| mod - docbook/adminguide/en/authentication.sgml | Diff File | ||
| mod - docbook/adminguide/en/page_descriptions.sgml | Diff File | ||
| mod - docbook/adminguide/en/contributing.sgml | Diff File | ||
| mod - docbook/adminguide/en/about.sgml | Diff File | ||
| mod - docbook/adminguide/en/installation.sgml | Diff File | ||
| mod - docbook/adminguide/en/customizing_mantis.sgml | Diff File | ||
| mod - docbook/adminguide/en/project_management.sgml | Diff File | ||
| mod - docbook/adminguide/en/user_management.sgml | Diff File | ||
|
master 28e4cbb5 2009-12-03 11:48 Details Diff |
Issue 0011065: Add admin guide chapter/section ids |
Affected Issues 0011065 |
|
| mod - docbook/adminguide/en/workflow.sgml | Diff File | ||
| mod - docbook/adminguide/en/configuration.sgml | Diff File | ||
| mod - docbook/adminguide/en/authentication.sgml | Diff File | ||
| mod - docbook/adminguide/en/page_descriptions.sgml | Diff File | ||
| mod - docbook/adminguide/en/contributing.sgml | Diff File | ||
| mod - docbook/adminguide/en/about.sgml | Diff File | ||
| mod - docbook/adminguide/en/installation.sgml | Diff File | ||
| mod - docbook/adminguide/en/customizing_mantis.sgml | Diff File | ||
| mod - docbook/adminguide/en/project_management.sgml | Diff File | ||
| mod - docbook/adminguide/en/user_management.sgml | Diff File | ||
|
master-1.2.x 0085bcd7 2009-12-03 09:33 Details Diff |
Fix 0011031, 10930: fix anonymous user auto-login The original issue with 10930 was that user verification, when checking to see if a user was logged in, would trigger automatic login of the anonymous user account, which would lead to a redirect loop, where each page load would auto-login the anonymous user and immediately log them out and redirect. The original fix for this disabled auto-login of the anonymous user account when calling auth_is_user_authenticated(), which broke expectations of much of the codebase. By re-enabling auto-login, but offering optional bypass of this process, it fixes both issues. Any page expecting to correctly work with unauthenticated users will need to pass a False parameter to the function to bypass automatic anonymous login. |
Affected Issues 0010930, 0011031 |
|
| mod - verify.php | Diff File | ||
| mod - core/authentication_api.php | Diff File | ||
|
master aa042ae6 2009-12-03 09:33 Details Diff |
Fix 0011031, 10930: fix anonymous user auto-login The original issue with 10930 was that user verification, when checking to see if a user was logged in, would trigger automatic login of the anonymous user account, which would lead to a redirect loop, where each page load would auto-login the anonymous user and immediately log them out and redirect. The original fix for this disabled auto-login of the anonymous user account when calling auth_is_user_authenticated(), which broke expectations of much of the codebase. By re-enabling auto-login, but offering optional bypass of this process, it fixes both issues. Any page expecting to correctly work with unauthenticated users will need to pass a False parameter to the function to bypass automatic anonymous login. |
Affected Issues 0010930, 0011031 |
|
| mod - verify.php | Diff File | ||
| mod - core/authentication_api.php | Diff File | ||
|
master-1.2.x 53428442 2009-12-03 08:57 Details Diff |
Fix 0011253: Projection column not shown correctly |
Affected Issues 0011253 |
|
| mod - core/columns_api.php | Diff File | ||
|
master 09b1691c 2009-12-03 08:57 Details Diff |
Fix 0011253: Projection column not shown correctly |
Affected Issues 0011253 |
|
| mod - core/columns_api.php | Diff File | ||
|
master-1.2.x 5c05c074 2009-12-01 22:13 Details Diff |
Fixes 0011099: Signup email notifications are not encoded correctly. |
Affected Issues 0011099 |
|
| mod - core/email_api.php | Diff File | ||
|
master 0dc5580d 2009-12-01 22:13 Details Diff |
Fixes 0011099: Signup email notifications are not encoded correctly. |
Affected Issues 0011099 |
|
| mod - core/email_api.php | Diff File | ||
|
master-1.2.x 2515b365 2009-12-01 06:44 Details Diff |
Fix 0011223: RSS image has execute permission bits set /images/rss.png has the execute permission bits set incorrectly. Thanks to cor3huis for reporting this bug. |
Affected Issues 0011223 |
|
|
master e95b87a3 2009-12-01 06:44 Details Diff |
Fix 0011223: RSS image has execute permission bits set /images/rss.png has the execute permission bits set incorrectly. Thanks to cor3huis for reporting this bug. |
Affected Issues 0011223 |
|