Changesets: MantisBT

master 0dae416a

2015-04-18 14:37

dregad


Details Diff
Fixing link to disposable library in README.libs
mod - library/README.libs Diff File

master ba6b8422

2015-04-18 08:22

vboctor


Details Diff
Anti-spam check when uploading files

Fixes 0019261
Affected Issues
0019261
mod - core/file_api.php Diff File

master 6a90613f

2015-04-18 08:19

vboctor


Details Diff
Update phpdoc for uses antispam_api Affected Issues
0019261
mod - core/bug_api.php Diff File
mod - core/bugnote_api.php Diff File
mod - core/tag_api.php Diff File

master 56859c9e

2015-04-18 08:18

vboctor


Details Diff
Rename spam_check() to antispam_check()

This matches our naming convention for APIs.
Affected Issues
0019261
mod - core/antispam_api.php Diff File
mod - core/bug_api.php Diff File
mod - core/bugnote_api.php Diff File
mod - core/tag_api.php Diff File

master 0ed1d2d9

2015-04-17 23:23

vboctor


Details Diff
Fix required custom field not set on update

Users without write access to a required custom field can't update issue at all.

If there is a custom field that is marked as required-on-update with write access set to MANAGER.
Then developers who can update the issue, can no longer update it, otherwise,
they get error about required custom field not set.

Fixes 0019634
Affected Issues
0019634
mod - bug_update.php Diff File

master 292db255

2015-04-17 22:42

vboctor


Details Diff
Protect against malicious REPORTERs

This is a proposal against enabling spammers to signup and spam
the bug tracker. The changes limits the number of possible changes
by signed up users to 10 per hour. Although the feature and limits are configurable.
This check doesn't apply when signup feature is not enabled or when users have access
level above the default was assigned on signup.

Issue 0019261
Affected Issues
0019261
mod - config_defaults_inc.php Diff File
add - core/antispam_api.php Diff File
mod - core/bug_api.php Diff File
mod - core/bugnote_api.php Diff File
mod - core/constant_inc.php Diff File
mod - core/history_api.php Diff File
mod - core/tag_api.php Diff File
mod - docbook/Admin_Guide/en-US/Configuration.xml Diff File
add - docbook/Admin_Guide/en-US/config/antispam.xml Diff File
mod - lang/strings_english.txt Diff File

master 7cd2fa56

2015-04-16 14:34

dregad


Details Diff
Don't sanitize user email prior to validation

Before this, email_is_valid() validated a sanitized string (using
filter_var() with FILTER_SANITIZE_EMAIL).

We now validate the email exactly as it was entered by the user to
ensure we don't accept an address that was actually made valid by the
sanitization itself.

Fixes 0017280
Affected Issues
0017280
mod - core/email_api.php Diff File

master bc195dd5

2015-04-16 13:53

dregad


Details Diff
Simplify email validation to only use HTML5 regex

This commit follows the discussion in pull request
https://github.com/mantisbt/mantisbt/pull/172

It basically removes the possibility for the admin to choose between
several e-mail validation methods, and goes back to a simple ON/OFF
setting for $g_validate_email.

Fixes 0017279
Affected Issues
0017279
mod - config_defaults_inc.php Diff File
mod - core/constant_inc.php Diff File
mod - core/email_api.php Diff File
mod - docbook/Admin_Guide/en-US/config/email.xml Diff File

master 6d4378b9

2015-04-13 07:35

dregad


Details Diff
Time tracking: project-specific access to billing page

The access check against $g_time_tracking_reporting_threshold is now
made with access_ensure_project_level() instead of
access_ensure_global_level()

Fixes 0019588
Affected Issues
0019588
mod - billing_page.php Diff File
mod - core/html_api.php Diff File

master-1.2.x 1eb1f88d

2015-04-13 07:35

dregad


Details Diff
Time tracking: project-specific access to billing page

The access check against $g_time_tracking_reporting_threshold is now
made with access_ensure_project_level() instead of
access_ensure_global_level()

Fixes 0019588
Affected Issues
0019588
mod - billing_page.php Diff File
mod - core/html_api.php Diff File

master-1.2.x ea6184a7

2015-04-13 01:13

dregad


Details Diff
Only use timezone_identifiers_list if it exists

The function was called during admin checks before its existence was
verified.

Fixes 0019609
Affected Issues
0019609
mod - admin/check.php Diff File

master 605ef054

2015-04-10 21:48

Rafik Robeal


Details Diff
Fix font-awesome icons to show on IE9 & IE10
add - fonts/.htaccess Diff File

master 119aca13

2015-04-10 20:25

vboctor


Details Diff
Support multi-line default values for memo fields

- When type is text area enable setting multi-line default.
- When type is text area, don't enable possible values field.

Fixes 0019542
Affected Issues
0019542
mod - core/custom_field_api.php Diff File
add - javascript/manage_custom_field_edit_page.js Diff File
mod - manage_custom_field_edit_page.php Diff File

mantishub-1.3.x-20150418_1638 18ff2337

2015-04-10 18:21

Victor Boctor


Details Diff
Enable resetting impersonated user password
mod - manage_user_edit_page.php Diff File

mantishub-1.3.x-20150418_1638 c6dad5a6

2015-04-10 18:16

Victor Boctor


Details Diff
Disable re-auth when user is impersonated
mod - core/authentication_api.php Diff File

mantishub-1.3.x-20150418_1638 edcd4101

2015-04-10 17:56

Victor Boctor


Details Diff
Re-enable email on impersonation
mod - mantishub_config_defaults_inc.php Diff File

mantishub-1.3.x-20150418_1638 ccc99583

2015-04-10 17:43

Victor Boctor


Details Diff
Add hint to footer for reply to comment
mod - core/mantishub_api.php Diff File

master 394a777f

2015-04-10 06:54

dregad


Details Diff
Don't call bug_exists if we already know it doesn't
mod - core/string_api.php Diff File

master 1e1a0ef3

2015-04-10 06:52

dregad


Details Diff
Remove irrelevant comment
mod - core/string_api.php Diff File

master c4bf4a09

2015-04-10 06:45

dregad


Details Diff
multi_sort: use closure instead of custom_function()
mod - core/utility_api.php Diff File

master f66d8981

2015-04-10 05:57

dregad


Details Diff
Don't create FQDN link when the bug doesn't exist

Fixes 0019606
Affected Issues
0019606
mod - core/string_api.php Diff File

master-1.2.x baaebb0d

2015-04-10 05:57

dregad


Details Diff
Don't create FQDN link when the bug doesn't exist

Backport from master a929e983cd2b8781f7c37613f6c7e6fa5c6ed0dc.

Fixes 0019606
Affected Issues
0019606
mod - core/string_api.php Diff File

master 07f97b77

2015-04-10 05:52

dregad


Details Diff
Link callback arrays become static variables

Since they are used only in the context of the string_process_bug_link()
and string_process_bugnote_link() functions, we do not actually need to
use global variables; local, static ones make more sense.

- $g_string_process_bug_link_callback -> $s_bug_link_callback
- $g_string_process_bugnote_link_callback -> $s_bugnote_link_callback
mod - core/string_api.php Diff File

master e0980a2d

2015-04-10 04:59

dregad


Details Diff
Wrap long line
mod - core/string_api.php Diff File

master d65f36dc

2015-04-10 04:58

dregad


Details Diff
Use closure instead of custom_function()
mod - core/string_api.php Diff File
 First  Prev  1 2 3 ... 70 ... 140 ... 210 ... 217 218 219 220 221 222 223 ... 280 ... 350 ... 420 ... 490 ... 560 ... 630 ... 700 ... 704 705 706  Next  Last