Changesets: MantisBT

master-1.3.x 17f9b94f

2017-08-01 03:00

dregad


Details Diff
Fix XSS in install.php (CVE-2017-12061)

aLLy from ONSEC (https://twitter.com/IamSecurity) reported this
vulnerability, allowing an attacker to inject arbitrary code through
crafted forms variables.

Sanitizing the database error message prior to output prevents the
attack.

Fixes 0023146

Backported from c73ae3d3d4dd4681489a9e697e8ade785e27cba5
Affected Issues
0023146, 0023175
mod - admin/install.php Diff File

master-2.5 c73ae3d3

2017-08-01 03:00

dregad


Details Diff
Fix XSS in install.php (CVE-2017-12061)

aLLy from ONSEC (https://twitter.com/IamSecurity) reported this
vulnerability, allowing an attacker to inject arbitrary code through
crafted forms variables.

Sanitizing the database error message prior to output prevents the
attack.

Fixes 0023146
Affected Issues
0023146
mod - admin/install.php Diff File

master-2.5 9b5b71da

2017-07-27 13:14

atrol

Committer: dregad


Details Diff
Fix XSS in manage_user_page.php (CVE-2017-12062)

trichimtrich (https://twitter.com/trichimtrich) reported this
vulnerability, allowing an attacker to inject arbitrary code through a
crafted 'filter' form variable.

Prevent the attack by sanitizing the variable before output.

Fixes 0023166

Signed-off-by: Damien Regad <dregad@mantisbt.org>
Affected Issues
0023166
mod - manage_user_page.php Diff File

master 3fa9f5d6

2017-07-27 11:59

atrol


Details Diff
Enhance graph display

Reduce transparency
Remove axes form pie charts

Fixes 0023159
Affected Issues
0023159
mod - plugins/MantisGraph/core/graph_api.php Diff File
mod - plugins/MantisGraph/files/MantisGraph.js Diff File

master 09f749de

2017-07-27 00:18

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_latvian.txt Diff File
mod - plugins/MantisGraph/lang/strings_asturian.txt Diff File

master df80e3a0

2017-07-25 12:41

atrol


Details Diff
Display "Monitored By" user list based on monitor_bug_threshold

Fixes 0023087
Affected Issues
0023087
mod - core/filter_form_api.php Diff File

master 18d5214f

2017-07-24 12:27

atrol


Details Diff
Remove UTF-8 library from source

Issue 0023214
Affected Issues
0023214
mod - core.php Diff File
mod - library/README.md Diff File
rm - library/utf8/ChangeLog Diff
rm - library/utf8/LICENSE Diff
rm - library/utf8/README Diff
rm - library/utf8/TODO.tsk Diff
rm - library/utf8/exp/regexunicode.php Diff
rm - library/utf8/index.html Diff
rm - library/utf8/mbstring/core.php Diff
rm - library/utf8/native/core.php Diff
rm - library/utf8/ord.php Diff
rm - library/utf8/readme_mantis.txt Diff
rm - library/utf8/str_ireplace.php Diff
rm - library/utf8/str_pad.php Diff
rm - library/utf8/str_split.php Diff
rm - library/utf8/strcasecmp.php Diff
rm - library/utf8/strcspn.php Diff
rm - library/utf8/stristr.php Diff
rm - library/utf8/strrev.php Diff
rm - library/utf8/strspn.php Diff
rm - library/utf8/substr_replace.php Diff
rm - library/utf8/trim.php Diff
rm - library/utf8/ucfirst.php Diff
rm - library/utf8/ucwords.php Diff
rm - library/utf8/utf8.php Diff
rm - library/utf8/utils/ascii.php Diff
rm - library/utf8/utils/bad.php Diff
rm - library/utf8/utils/patterns.php Diff
rm - library/utf8/utils/position.php Diff
rm - library/utf8/utils/specials.php Diff
rm - library/utf8/utils/unicode.php Diff
rm - library/utf8/utils/validation.php Diff

master d61ccd1e

2017-07-24 10:59

atrol


Details Diff
Remove unused code and generation of unused CSS code

The following kind of CSS is no longer needed since status legend
and status_legend_position have been obsoleted.

.status-legend-width { width: 14%; }

Fixes 0023150
Affected Issues
0023150
mod - config_defaults_inc.php Diff File
mod - css/status_config.php Diff File

master 32e30f3e

2017-07-23 15:55

Zipher

Committer: atrol


Details Diff
Show file added event in timeline. And remove identical event from
timeline.
add - core/classes/IssueFileAddedTimelineEvent.class.php Diff File
mod - core/timeline_api.php Diff File
mod - lang/strings_chinese_traditional.txt Diff File
mod - lang/strings_english.txt Diff File

master bb69572c

2017-07-23 11:32

vboctor


Details Diff
Support deleting notes via REST API

Fixes 0023145
Affected Issues
0023145
mod - api/rest/restcore/issues_rest.php Diff File

master 4a4cc453

2017-07-23 11:18

vboctor


Details Diff
Fix note timestamps in REST APIs

Fixes 0023139
Affected Issues
0023139
mod - api/soap/mc_issue_api.php Diff File

master 10ff2817

2017-07-23 11:11

vboctor


Details Diff
Support sub-projects in REST API get all projects

- GET /api/rest/projects should return sub-projects.
- Projects should include “subProjects” element that lists sub-projects.
- Project info returned for sub-project reflects inherited information like categories and versions.

Fixes 0023131
Affected Issues
0023131
mod - api/rest/restcore/projects_rest.php Diff File

master 39219bd9

2017-07-23 10:46

vboctor


Details Diff
Support adding issue notes

Support adding a note while specifying text, reporter, and view state.

Fixes 0023143
Affected Issues
0023143
mod - api/rest/restcore/issues_rest.php Diff File
mod - api/soap/mc_issue_api.php Diff File

master 3034a126

2017-07-23 05:27

atrol


Details Diff
Remove loading of UTF8 library

Issue 0023214
Affected Issues
0023214
mod - core.php Diff File

master 3278e4d5

2017-07-23 05:17

atrol


Details Diff
Move function utf8_str_pad to Mantis core

Thers is still no function mb_str_pad in latest PHP
https://bugs.php.net/bug.php?id=21317

The function has been changed to use no longer utf8_*, but mb_* functions.

I didn't rename the function to mb_str_pad to avoid any problems
if there will be mb_str_pad in later PHP versions.

Issue 0023214
Affected Issues
0023214
mod - core.php Diff File
mod - core/string_api.php Diff File

master 442eb35e

2017-07-23 01:49

atrol


Details Diff
Remove generation of unused CSS code

The following kind of CSS is no longer need since
status_percentage_legend has been obsoleted.

.status-10-percentage { width: 11%; }

Fixes 0023141
Affected Issues
0023141
mod - css/status_config.php Diff File

master 9e81d27a

2017-07-22 03:14

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_spanish.txt Diff File
mod - plugins/MantisGraph/lang/strings_spanish.txt Diff File

master 27090d47

2017-07-16 12:33

atrol


Details Diff
Replace utf8_strtoupper by mb_strtoupper

Issue 0023214
Affected Issues
0023214
mod - manage_tags_page.php Diff File
mod - manage_user_page.php Diff File

master 322acccd

2017-07-16 12:29

atrol


Details Diff
Replace utf8_strtolower by mb_strtolower

Issue 0023214
Affected Issues
0023214
mod - bug_actiongroup_ext_page.php Diff File
mod - core/columns_api.php Diff File
mod - core/database_api.php Diff File
mod - core/file_api.php Diff File
mod - core/filter_api.php Diff File
mod - core/filter_form_api.php Diff File
mod - core/helper_api.php Diff File
mod - core/install_helper_functions_api.php Diff File
mod - core/lang_api.php Diff File
mod - core/tag_api.php Diff File
mod - core/version_api.php Diff File
mod - manage_proj_cat_update.php Diff File
mod - print_all_bug_options_update.php Diff File
mod - signup.php Diff File

master 292c7049

2017-07-16 12:18

atrol


Details Diff
Replace utf8_substr by mb_substr

Issue 0023214
Affected Issues
0023214
mod - bug_actiongroup_ext_page.php Diff File
mod - bugnote_view_inc.php Diff File
mod - core/authentication_api.php Diff File
mod - core/cfdefs/cfdef_standard.php Diff File
mod - core/columns_api.php Diff File
mod - core/custom_field_api.php Diff File
mod - core/database_api.php Diff File
mod - core/form_api.php Diff File
mod - core/helper_api.php Diff File
mod - core/install_helper_functions_api.php Diff File
mod - core/php_api.php Diff File
mod - core/plugin_api.php Diff File
mod - core/relationship_api.php Diff File
mod - core/string_api.php Diff File
mod - core/tag_api.php Diff File
mod - csv_export.php Diff File
mod - issues_rss.php Diff File
mod - news_rss.php Diff File
mod - plugins/MantisGraph/pages/issues_trend_bystatus_table.php Diff File
mod - print_all_bug_page_word.php Diff File
mod - return_dynamic_filters.php Diff File
mod - search.php Diff File

master 63cac7b8

2017-07-16 11:46

atrol


Details Diff
Replace utf8_strlen by mb_strlen

Issue 0023214
Affected Issues
0023214
mod - bug_actiongroup_ext_page.php Diff File
mod - bug_actiongroup_page.php Diff File
mod - bugnote_view_inc.php Diff File
mod - core/api_token_api.php Diff File
mod - core/cfdefs/cfdef_standard.php Diff File
mod - core/custom_field_api.php Diff File
mod - core/database_api.php Diff File
mod - core/filter_api.php Diff File
mod - core/helper_api.php Diff File
mod - core/install_helper_functions_api.php Diff File
mod - core/relationship_api.php Diff File
mod - core/string_api.php Diff File
mod - core/user_api.php Diff File
mod - print_all_bug_page_word.php Diff File

master 94cf14e4

2017-07-15 06:59

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_greek.txt Diff File
mod - lang/strings_lithuanian.txt Diff File
mod - plugins/MantisCoreFormatting/lang/strings_french.txt Diff File
mod - plugins/MantisGraph/lang/strings_breton.txt Diff File
mod - plugins/MantisGraph/lang/strings_greek.txt Diff File
mod - plugins/MantisGraph/lang/strings_lithuanian.txt Diff File
mod - plugins/MantisGraph/lang/strings_portuguese_brazil.txt Diff File

master dd288c34

2017-07-14 04:08

mamidenn


Details Diff
Fix HTML syntax error Affected Issues
0023116
mod - bug_update_page.php Diff File

master ca19157c

2017-07-12 21:12

vboctor


Details Diff
Support issue id as part of the path

Support paths like:
https://…./api/rest/issues/12345

In addition to:
https://…./api/rest/issues?id=12345
mod - api/rest/restcore/issues_rest.php Diff File

master f1f9de60

2017-07-04 00:08

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net.
mod - lang/strings_chinese_simplified.txt Diff File
mod - plugins/MantisGraph/lang/strings_chinese_simplified.txt Diff File
 First  Prev  1 2 3 ... 70 ... 137 138 139 140 141 142 143 ... 210 ... 280 ... 350 ... 420 ... 490 ... 560 ... 630 ... 700 ... 704 705 706  Next  Last