Changesets: MantisBT

master e8a8fe7f

2023-02-04 12:47

dregad


Details Diff
Dockerfile to build documentation with Publican

Publican is an ageing tool that is no longer developed or supported, and
difficult to install under non-Linux-based platforms.

Using a Docker container makes it possible to easily build the MantisBT
documentation without having to install a complex toolchain.

See usage instructions inside the dockerfile.

Fixes 0031993
Affected Issues
0031993
add - docbook/Dockerfile Diff File

master ccf42f9b

2023-02-02 07:07

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_slovene.txt Diff File

master 2532aaa7

2023-01-26 07:09

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_bulgarian.txt Diff File
mod - lang/strings_galician.txt Diff File
mod - lang/strings_macedonian.txt Diff File
mod - plugins/MantisGraph/lang/strings_galician.txt Diff File
mod - plugins/XmlImportExport/lang/strings_galician.txt Diff File

master e66e836b

2023-01-23 07:06

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_slovene.txt Diff File

master eafba72e

2023-01-19 07:08

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_slovene.txt Diff File

master 31037444

2023-01-12 07:07

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_slovene.txt Diff File

master-2.25 5b14eee7

2023-01-10 04:16

dregad


Details Diff
Remove unnecessary isset() check

unset() does not trigger errors if called on a non-existing variable.
mod - core/version_api.php Diff File

master-2.25 df94e264

2023-01-10 03:31

dregad


Details Diff
Use $p_project_id in config_get() calls
mod - core/prepare_api.php Diff File

master-2.25 be4708ce

2023-01-09 20:00

dregad


Details Diff
Add missing date for unreleased versions

Commit 8fbf719447ec72500b648ee440298811f8050bd7 stopped display of
unreleased versions' date_order when the user has
$g_show_version_dates_threshold.

This partially reverts to and improves previous behavior, so the date is
always shown unless it is not set.

Fixes 0031889
Affected Issues
0031889
mod - core/prepare_api.php Diff File

master-2.25 dace8f0f

2023-01-09 19:50

dregad


Details Diff
PHPDoc
mod - core/prepare_api.php Diff File
mod - core/version_api.php Diff File

master a91b8952

2023-01-09 07:16

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_portuguese_brazil.txt Diff File
mod - lang/strings_slovene.txt Diff File

master a3211026

2023-01-07 20:57

grummbeer

Committer: community


Details Diff
Markdown: simplify table processing

Overriding Parsedown's element() method which gives access to all
marked elements makes it easy to change the properties/attributes of
an element just before it is converted into HTML markup.

This addresses steps 2 and 3 (cleanup tables and tests) of issue 0030919.

Merge PR https://github.com/mantisbt/mantisbt/pull/1848

Co-authored-by: grummbeer <kde@streber24.de>
Co-authored-by: Damien Regad <dregad@mantisbt.org>
Affected Issues
0030919
mod - plugins/MantisCoreFormatting/core/MantisMarkdown.php Diff File
mod - plugins/MantisCoreFormatting/tests/MarkdownTest.php Diff File

master 44114057

2023-01-07 19:29

dregad


Details Diff
Fix static analysis warnings
mod - tests/soap/FilterTest.php Diff File

master bdd74f2c

2023-01-07 19:16

dregad


Details Diff
Whitespace
mod - tests/soap/FilterTest.php Diff File

master 44960924

2023-01-07 19:15

dregad


Details Diff
Fix FilterTest::testGetIssuesForUserForUnassignedNoTargetUser

The test case incorrectly failed when executed against a database
containing one or more unassigned sticky issues.

This is because filter_get_bug_rows() returns data sorted with sticky
issues first, and the test case made a bad assumption that the issue
created for the test case will be at index 0.
mod - tests/soap/FilterTest.php Diff File

master 7764e8a3

2023-01-07 11:44

dregad


Details Diff
Minor performance optimization

Since we know the user ID, pass it to access_has_bug_level() to avoid
an extra auth_get_current_user_id() call.
mod - bug_actiongroup_page.php Diff File

master-2.25 840a4e80

2023-01-06 20:16

dregad


Details Diff
Prevent disclosure of private issue summary

Insufficient access level checks allowed an attacker to display private
issues' summary via Group Actions (bug_actiongroup_ext.php).

Going through the provided list of issue IDs (bug_arr[]) and removing
any issues the user does not have access to, fixes the vulnerability.

Credits to d3vpoo1 (https://github.com/jrckmcsb) for reporting the issue.

Fixes 0031086, CVE-2023-22476
Affected Issues
0031086
mod - bug_actiongroup_ext.php Diff File

master 5af5ad7d

2023-01-05 09:20

dregad


Details Diff
Fix static analysis warnings
mod - bug_report_page.php Diff File
mod - core/exceptions/ClientException.php Diff File
mod - core/exceptions/MantisException.php Diff File

master deab6792

2023-01-05 07:11

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_slovene.txt Diff File
add - plugins/Gravatar/lang/strings_slovene.txt Diff File
add - plugins/MantisGraph/lang/strings_slovene.txt Diff File
add - plugins/XmlImportExport/lang/strings_slovene.txt Diff File

master-2.25 0ead54f1

2023-01-04 13:06

dregad


Details Diff
Improve documentation for $g_due_date_default
mod - config_defaults_inc.php Diff File
mod - docbook/Admin_Guide/en-US/config/duedate.xml Diff File

master-2.25 f2239a9a

2023-01-04 13:03

dregad


Details Diff
Use date_strtotime() instead of strtotime()

Replace native strtotime() calls by revised date_strtotime() where
relevant, i.e. when date string could be user-provided.

This prevents occurrence of the error described in issue #31866.

It also allows users to submit dates in $g_normal_date_format in the
following situations:

- REST API: Create a project version (timestamp), Add Issue (due_date)
- SOAP API: Add/Update Issue (due_date) and Project Version Update
(date_order)
- Bug Update, Bug API (due_date)
NOTE: change to bug_update.php is not strictly not necessary as the
script is normally only called internally, not directly by users.

TODO: the REST API's documentation should be updated
mod - api/soap/mc_issue_api.php Diff File
mod - api/soap/mc_project_api.php Diff File
mod - bug_update.php Diff File
mod - core/bug_api.php Diff File
mod - core/commands/IssueAddCommand.php Diff File
mod - core/commands/VersionAddCommand.php Diff File

master-2.25 91df620c

2023-01-04 12:47

dregad


Details Diff
PHPDoc
mod - core/version_api.php Diff File

master-2.25 9b81b5ee

2023-01-04 12:46

dregad


Details Diff
Initialize VersionData date_order with date_strtotime()
mod - core/version_api.php Diff File

master-2.25 17d9999c

2023-01-04 12:40

dregad


Details Diff
Improve date_strtotime()

Following the logic introduced in dbafafa9d98c9cd1dfe3642b5dcbb0a5ef925f6e,
the function now relies on DateTimeImmutable instead of strtotime() to
convert the string to a Unix timestamp.

It starts the conversion attempt by using $g_normal_date_format, and if
that fails falls back to PHP Supported Date and Time Formats.
mod - core/date_api.php Diff File

master 72daaa92

2023-01-03 05:42

dregad


Details Diff
Revert changes to api/rest/index.php

This is a partial revert of bfd28436d9951df7588d07d0c8b587b56c20a504.

The updated index.php belongs to a work-in-progress upgrade of Slim
Framework from v3 t v4, and should not have been committed.
mod - api/rest/index.php Diff File
 First  Prev  1 2 3 ... 64 65 66 67 68 69 70 ... 140 ... 210 ... 280 ... 350 ... 420 ... 490 ... 560 ... 630 ... 700 ... 744 745 746  Next  Last