Changesets: MantisBT

master be28bfa2

2022-04-07 07:06

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_persian.txt Diff File

master 94a42f3e

2022-04-04 07:06

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_persian.txt Diff File
mod - lang/strings_spanish.txt Diff File

master 297929bf

2022-03-31 07:07

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_belarusian_tarask.txt Diff File
mod - lang/strings_hindi.txt Diff File
mod - lang/strings_persian.txt Diff File

dependabot/composer/adodb/adodb-php-5.22.1 42f74bec

2022-03-30 21:20

dependabot[bot]

Committer: community


Details Diff
Bump adodb/adodb-php from 5.21.4 to 5.22.1

Bumps [adodb/adodb-php](https://github.com/ADOdb/ADOdb) from 5.21.4 to 5.22.1.
- [Release notes](https://github.com/ADOdb/ADOdb/releases)
- [Changelog](https://github.com/ADOdb/ADOdb/blob/master/docs/changelog.md)
- [Commits](https://github.com/ADOdb/ADOdb/compare/v5.21.4...v5.22.1)

---
updated-dependencies:
- dependency-name: adodb/adodb-php
dependency-type: direct:production
update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
mod - composer.lock Diff File

dependabot/composer/guzzlehttp/psr7-1.8.5 d32c2417

2022-03-29 18:24

dependabot[bot]

Committer: dregad


Details Diff
Bump guzzlehttp/psr7 from 1.7.0 to 1.8.5

Bumps [guzzlehttp/psr7](https://github.com/guzzle/psr7) from 1.7.0 to 1.8.5.
- [Release notes](https://github.com/guzzle/psr7/releases)
- [Changelog](https://github.com/guzzle/psr7/blob/1.8.5/CHANGELOG.md)
- [Commits](https://github.com/guzzle/psr7/compare/1.7.0...1.8.5)

---
updated-dependencies:
- dependency-name: guzzlehttp/psr7
dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Fixes 0029848
Affected Issues
0029848
mod - composer.lock Diff File

dependabot/composer/guzzlehttp/psr7-1.8.5 c6a9cad6

2022-03-29 18:24

dependabot[bot]

Committer: community


Details Diff
Bump guzzlehttp/psr7 from 1.7.0 to 1.8.5

Bumps [guzzlehttp/psr7](https://github.com/guzzle/psr7) from 1.7.0 to 1.8.5.
- [Release notes](https://github.com/guzzle/psr7/releases)
- [Changelog](https://github.com/guzzle/psr7/blob/1.8.5/CHANGELOG.md)
- [Commits](https://github.com/guzzle/psr7/compare/1.7.0...1.8.5)

---
updated-dependencies:
- dependency-name: guzzlehttp/psr7
dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
mod - composer.lock Diff File

master 92bffb79

2022-03-28 07:07

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_persian.txt Diff File

master ed61f4cd

2022-03-21 08:06

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_asturian.txt Diff File
mod - lang/strings_hindi.txt Diff File

master 140a8a0e

2022-03-17 08:07

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_swedish.txt Diff File

master 6ef2600f

2022-03-09 13:12

dregad


Details Diff
Address PR review comments
mod - config_defaults_inc.php Diff File
mod - core/gpc_api.php Diff File

master 688c2551

2022-03-07 07:06

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_arabic.txt Diff File
mod - lang/strings_chinese_traditional.txt Diff File

master 0eed4ad8

2022-03-03 07:06

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_hebrew.txt Diff File

master 2501aeb3

2022-02-28 20:25

dependabot[bot]

Committer: dregad


Details Diff
Bump phpmailer/phpmailer from 6.5.3 to 6.6.0

Bumps [phpmailer/phpmailer](https://github.com/PHPMailer/PHPMailer) from 6.5.3 to 6.6.0.
- [Release notes](https://github.com/PHPMailer/PHPMailer/releases)
- [Changelog](https://github.com/PHPMailer/PHPMailer/blob/master/changelog.md)
- [Commits](https://github.com/PHPMailer/PHPMailer/compare/v6.5.3...v6.6.0)

---
updated-dependencies:
- dependency-name: phpmailer/phpmailer
dependency-type: direct:production
update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Fixes 0029025, PR https://github.com/mantisbt/mantisbt/pull/1798
[skip ci]
Affected Issues
0029025
mod - composer.lock Diff File

dependabot/composer/phpmailer/phpmailer-6.6.0 56eb6254

2022-02-28 20:25

dependabot[bot]

Committer: community


Details Diff
Bump phpmailer/phpmailer from 6.5.3 to 6.6.0

Bumps [phpmailer/phpmailer](https://github.com/PHPMailer/PHPMailer) from 6.5.3 to 6.6.0.
- [Release notes](https://github.com/PHPMailer/PHPMailer/releases)
- [Changelog](https://github.com/PHPMailer/PHPMailer/blob/master/changelog.md)
- [Commits](https://github.com/PHPMailer/PHPMailer/compare/v6.5.3...v6.6.0)

---
updated-dependencies:
- dependency-name: phpmailer/phpmailer
dependency-type: direct:production
update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
mod - composer.lock Diff File

master-2.25 a7751c3e

2022-02-25 17:01

dregad


Details Diff
Fix XSS when displaying plugin name

Improper escaping of the plugin name allows attacker to inject code in
manage_plugin_page.php and manage_plugin_uninstall.php.

Fixes 0029688
Affected Issues
0029688
mod - manage_plugin_page.php Diff File
mod - manage_plugin_uninstall.php Diff File

master 0d09857d

2022-02-24 07:06

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_luxembourgish.txt Diff File
mod - lang/strings_russian.txt Diff File
mod - lang/strings_turkish.txt Diff File
mod - lang/strings_ukrainian.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_ukrainian.txt Diff File
mod - plugins/XmlImportExport/lang/strings_ukrainian.txt Diff File

master bcb830e1

2022-02-21 07:06

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_hebrew.txt Diff File

dependabot/composer/phpmailer/phpmailer-6.5.4 b2c9f17d

2022-02-17 20:22

dependabot[bot]

Committer: community


Details Diff
Bump phpmailer/phpmailer from 6.5.3 to 6.5.4

Bumps [phpmailer/phpmailer](https://github.com/PHPMailer/PHPMailer) from 6.5.3 to 6.5.4.
- [Release notes](https://github.com/PHPMailer/PHPMailer/releases)
- [Changelog](https://github.com/PHPMailer/PHPMailer/blob/master/changelog.md)
- [Commits](https://github.com/PHPMailer/PHPMailer/compare/v6.5.3...v6.5.4)

---
updated-dependencies:
- dependency-name: phpmailer/phpmailer
dependency-type: direct:production
update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
mod - composer.lock Diff File

master 4e5ac29b

2022-02-17 16:54

Daniele Verducci

Committer: community


Details Diff
Only add hostname to In-Reply-To header when needed

When sending mail via Mantis email api, the In-Reply-To header was
treated differently from the others: the value provided was
concatenated with the hostname and enclosed in angular brackets,
which prevented setting a custom In-Reply-To.

We now only add the hostname when one is not already present.

Fixes 0029585, PR https://github.com/mantisbt/mantisbt/pull/1795

Co-authored-by: Daniele Verducci <daniele.verducci@ag2.it>
Affected Issues
0029585
mod - core/email_api.php Diff File

master 958877f0

2022-02-17 11:40

dregad


Details Diff
Whitespace: fix indentation
mod - js/common.js Diff File

master 5607da07

2022-02-17 11:34

dregad


Details Diff
Collapse_settings cookie is no longer hardcoded

Use the new collapse_settings_cookie config in
- collapse_api.php
- common.js (exposing config in javascript_config.php).

Fixes 0029616
Affected Issues
0029616
mod - core/collapse_api.php Diff File
mod - javascript_config.php Diff File
mod - js/common.js Diff File

master 44d98615

2022-02-17 11:22

dregad


Details Diff
New config 'collapse_settings_cookie'

Issue 0029616
Affected Issues
0029616
mod - config_defaults_inc.php Diff File
mod - docbook/Admin_Guide/en-US/config/cookies.xml Diff File

master fb323ecd

2022-02-17 11:14

dregad


Details Diff
Doc: minor changes to Cookies section

- Order cookies list alphabeticallyin $g_cookie_prefix.
- Cookie prefix MUST be an identifier without whitespace, not SHOULD
- Whitespace and punctuation
mod - docbook/Admin_Guide/en-US/config/cookies.xml Diff File

master ea80bcfb

2022-02-17 04:45

dregad


Details Diff
Specify the SameSite attribute when setting cookies

This fixes the warnings caused by the SameSite attribute defaulting to
None that were displayed in the browser's console until now.

Changes in gpc_api.php:
- gpc_set_cookie() has a new $p_samesite parameter, defaulting to null,
meaning the value of $g_cookie_samesite config will be used.
- gpc_clear_cookie() also gets $p_samesite parameter, and sets the
cookie's value to 1 instead of '', to avoid console warnings
"Cookie XXX has been rejected because it is already expired".

Changes in common.js / javascript_config.php (fixing the
MANTIS_collapse_settings cookie):
- Expose configs cookie_samesite, cookie_path and cookie_domain
- Set the SameSite attribute, domain and path when setting the cookie

Changes in session_api.php:
- fixing the SameSite warnings for the PHP session cookie (PHPSESSID).

Note: in PHP < 7.3.0, the setcookie() function does not allow specifying
the SameSite attribute. To work around this limitation, the this commit
implements a hack relying on PHP bug 69948 [1].

Fixes 0029611

[1]: https://bugs.php.net/bug.php?id=69948
Affected Issues
0029611
mod - core/gpc_api.php Diff File
mod - core/session_api.php Diff File
mod - javascript_config.php Diff File
mod - js/common.js Diff File

master 9090c6c3

2022-02-17 04:40

dregad


Details Diff
New config 'cookie_samesite'

Specifies the SameSite attribute for MantisBT cookies.

Issue 0029611
Affected Issues
0029611
mod - config_defaults_inc.php Diff File
mod - docbook/Admin_Guide/en-US/config/cookies.xml Diff File
 First  Prev  1 2 3 ... 67 68 69 70 71 72 73 ... 140 ... 210 ... 280 ... 350 ... 420 ... 490 ... 560 ... 630 ... 700 ... 735 736 737  Next  Last