0021651: Dropzone has inline scripts in View Issue page

ID	Project	Category	View Status	Date Submitted	Last Update
0021651	mantisbt	security	public	2016-08-27 19:23	2016-12-05 09:29

Reporter	vboctor	Assigned To	syncguru
Priority	normal	Severity	block	Reproducibility	have not tried
Status	closed	Resolution	fixed
Product Version	2.0.0-beta.1
Target Version	2.0.0-rc.1	Fixed in Version	2.0.0-rc.1

Summary	0021651: Dropzone has inline scripts in View Issue page
Description	For now, we have an exception for View Issue page to enable inline script, but we should remove this once the Dropzone setup scripts are removed.
Tags	csp, modern-ui

MantisBT: master 48a71a70 2016-10-21 20:37 syncguru Committer: vboctor Details Diff	Relocate dropzone inline js to separate file Fixes 0021651	Affected Issues 0021651
	mod - bug_file_upload_inc.php	Diff File
	mod - bug_report_page.php	Diff File
	mod - bugnote_add_inc.php	Diff File
	mod - core/html_api.php	Diff File
	mod - core/http_api.php	Diff File
	add - dropzone_inc.php	Diff File
	rm - fileupload_inc.php	Diff
	mod - js/common.js	Diff File

related to	0020040	closed	syncguru	Replace jscalendar by a newer widget
related to	0021669	closed	syncguru	Charts have inline scripts
related to	0021743	closed	vboctor	Attach files dropzone is not working
related to	0021925	closed	dregad	Incorrect text for the remove file button in the file upload dropzone

syncguru 2016-10-19 22:51 developer ~0054291	PR: https://github.com/mantisbt/mantisbt/pull/923

syncguru 2016-10-22 00:41 developer ~0054317	PR: https://github.com/mantisbt/mantisbt/pull/931