Changesets: MantisBT

master-1.2.x 59498710

2009-07-06 10:38

dhx


Details Diff
Add CSRF protection for bug_file_delete
mod - bug_file_delete.php Diff File
mod - core/print_api.php Diff File

master-1.2.x 88b4537d

2009-07-06 10:19

dhx


Details Diff
Add CSRF protection for bug_assign_reporter
mod - bug_assign_reporter.php Diff File

master-1.2.x 2e3c614a

2009-07-06 10:16

dhx


Details Diff
Add CSRF protection for adm_config_delete
mod - adm_config_delete.php Diff File

master-1.2.x a45d0ef5

2009-07-06 10:12

dhx


Details Diff
Add CSRF protection to print_button function

As an additional note for this patch, we should ideally be sending
parameters to this function via $p_args_to_post where those parameters
are being used to change the state of Mantis. At the moment a form
security token is created for every call of print_button whereas we
really only need to do it when !empty($p_args_to_post). This requires a
bit of extra work outside the scope of this patch, and almost all uses of
print_button are to modify Mantis in some way, hence this partial fix.
mod - manage_proj_edit_page.php Diff File
mod - manage_proj_page.php Diff File
mod - core/print_api.php Diff File

master-1.2.x 948f0b89

2009-07-06 09:12

dhx


Details Diff
CSRF protection not needed in filter_api
mod - core/filter_api.php Diff File

master-1.2.x 151ff562

2009-07-06 09:09

dhx


Details Diff
CSRF protection not needed for action confirmation step
mod - core/helper_api.php Diff File

master-1.2.x 2e5da604

2009-07-06 09:04

dhx


Details Diff
CSRF protection not needed for bug_change_status_page
mod - core/html_api.php Diff File

master-1.2.x 23c2f765

2009-07-06 09:03

dhx


Details Diff
CSRF protection not needed for set_project
mod - core/html_api.php Diff File

master-1.2.x bc480a19

2009-07-06 09:01

dhx


Details Diff
CSRF protection not needed for login/reauthentication
mod - core/authentication_api.php Diff File
mod - login_page.php Diff File

master-1.2.x 20d9284c

2009-07-06 08:03

dhx


Details Diff
CSRF protection not needed for set_project
mod - login_select_proj_page.php Diff File

master-1.2.x 875e2320

2009-07-06 07:58

dhx


Details Diff
Cleanup form token usage on manage_proj_edit_page
mod - manage_proj_edit_page.php Diff File

master-1.2.x 9cd32f8c

2009-07-06 07:55

dhx


Details Diff
Add CSRF protection for plugin_xml_import_action
mod - plugins/XmlImportExport/pages/import.php Diff File
mod - plugins/XmlImportExport/pages/import_action.php Diff File

master-1.2.x f1b399d4

2009-07-06 07:47

dhx


Details Diff
Add CSRF protection for print_all_bug_options_reset
mod - print_all_bug_options_reset.php Diff File
mod - print_all_bug_options_inc.php Diff File

master-1.2.x b4706981

2009-07-06 07:46

dhx


Details Diff
Add CSRF protection for print_all_bug_options_update
mod - print_all_bug_options_inc.php Diff File
mod - print_all_bug_options_update.php Diff File

master-1.2.x 2fe3ee52

2009-07-06 07:43

dhx


Details Diff
CSRF protection not needed for print_all_bug_page
mod - print_all_bug_page.php Diff File

master-1.2.x f6654b05

2009-07-06 07:42

dhx


Details Diff
CSRF protection not needed for view_all_set
mod - print_all_bug_page.php Diff File

master-1.2.x 9590cfc8

2009-07-06 07:37

dhx


Details Diff
CSRF protection not needed for view_all_set
mod - view_filters_page.php Diff File

master-1.2.x c6b411f5

2009-07-06 07:21

dhx


Details Diff
CSRF protection not needed for bug_actiongroup_page
mod - view_all_inc.php Diff File

master-1.2.x 0fe39ae2

2009-07-06 07:08

dhx


Details Diff
CSRF protection not needed for tag_update_page
mod - tag_view_page.php Diff File

master-1.2.x 99926209

2009-07-06 07:07

dhx


Details Diff
Add CSRF protection for query_store
mod - query_store_page.php Diff File
mod - query_store.php Diff File

master-1.2.x 3f2376be

2009-07-06 07:04

dhx


Details Diff
Add CSRF protection for query_delete
mod - query_delete_page.php Diff File
mod - query_delete.php Diff File

master-1.2.x 434cc487

2009-07-06 07:00

dhx


Details Diff
Add CSRF protection for proj_doc_delete
mod - proj_doc_delete.php Diff File
mod - proj_doc_edit_page.php Diff File

master-1.2.x f41bc3d6

2009-07-06 06:50

dhx


Details Diff
Add CSRF protection for proj_doc_update
mod - proj_doc_edit_page.php Diff File
mod - proj_doc_update.php Diff File

master-1.2.x 3fee4564

2009-07-06 06:43

dhx


Details Diff
Add CSRF protection for proj_doc_add
mod - proj_doc_add.php Diff File
mod - proj_doc_add_page.php Diff File

master-1.2.x 5e175e3e

2009-07-06 04:37

dhx


Details Diff
Add CSRF protection for plugin_graph_config_edit
mod - plugins/MantisGraph/pages/config.php Diff File
mod - plugins/MantisGraph/pages/config_edit.php Diff File
 First  Prev  1 2 3 ... 80 ... 160 ... 240 ... 320 ... 400 ... 480 ... 524 525 526 527 528 529 530 ... 560 ... 640 ... 720 ... 762 763 764  Next  Last