{"push_id":564258433,"size":57,"distinct_size":19,"ref":"refs/heads/cleanup-quotes","head":"53f14198dd230dacac9adaed7b9d71fe99090602","before":"c4a61794b17989b06f6782da86bee2b2e15a6e74","commits":[{"sha":"4867410f778bb58a1125598d18613a413455070b","author":{"email":"dc548a8c362cf86d290c663311b10dac086658ee@kitano.nl","name":"Siebrand Mazeland"},"message":"Localisation updates from https://translatewiki.net.","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/4867410f778bb58a1125598d18613a413455070b"},{"sha":"d63d54aa81c2d40750af53c91866ccf7e578bcc0","author":{"email":"d9b599957bd54c22143053c16557076ca2185dbd@mantisbt.org","name":"Damien Regad"},"message":"Changed version to '1.3.0-beta.2-dev' [skip ci]","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/d63d54aa81c2d40750af53c91866ccf7e578bcc0"},{"sha":"b5eb93058007abff998c1aec8adf6c5d7335eb59","author":{"email":"d9b599957bd54c22143053c16557076ca2185dbd@mantisbt.org","name":"Damien Regad"},"message":"Install: Use foreach to check for obsolete config files","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/b5eb93058007abff998c1aec8adf6c5d7335eb59"},{"sha":"38325e2880d35311bb7f4633ee2d3de04d410b6c","author":{"email":"d9b599957bd54c22143053c16557076ca2185dbd@mantisbt.org","name":"Damien Regad"},"message":"Install: escape strings inserted in config_inc.php\n\nThis ensures it is not possible to inject arbitrary PHP code into the\ngenerated config file.\n\nFixes #12908, #17012","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/38325e2880d35311bb7f4633ee2d3de04d410b6c"},{"sha":"75c87e679a3f7f9195c62d92cf02a64d80fc5288","author":{"email":"dc548a8c362cf86d290c663311b10dac086658ee@kitano.nl","name":"Siebrand Mazeland"},"message":"Localisation updates from https://translatewiki.net.","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/75c87e679a3f7f9195c62d92cf02a64d80fc5288"},{"sha":"7cc4539fca65a61c48a40e31787e7d4751a7f9bd","author":{"email":"d9b599957bd54c22143053c16557076ca2185dbd@mantisbt.org","name":"Damien Regad"},"message":"Fix SQL injection in manage_user_page.php\n\nThis vulnerability (CVE-2014-9573) was reported by High-Tech Bridge\nSecurity Research Lab (https://www.htbridge.com/) in issue #17937\n(advisory ID HTB23243).\n\nTo avoid injection, the parameters we get from the cookie are now\nproperly sanitized before being used in the SQL query.\n\nFixes #17940","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/7cc4539fca65a61c48a40e31787e7d4751a7f9bd"},{"sha":"132cd6d041f8ef5811e4eca8bdb516c893ebb52e","author":{"email":"d9b599957bd54c22143053c16557076ca2185dbd@mantisbt.org","name":"Damien Regad"},"message":"Fix XSS in install.php\n\nThis vulnerability (CVE-2014-9571) was reported by High-Tech Bridge\nSecurity Research Lab (https://www.htbridge.com/) in issue #17937\n(advisory ID HTB23243).\n\nThe parameters are now properly sanitized before being displayed.\n\nFixes #17938","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/132cd6d041f8ef5811e4eca8bdb516c893ebb52e"},{"sha":"5e5e57508f47f4fa2f04d4f14befbfc3d5b19f6f","author":{"email":"d9b599957bd54c22143053c16557076ca2185dbd@mantisbt.org","name":"Damien Regad"},"message":"Install: disable step 4 (additional config info)\n\nThis fixes a security issue allowing an attacker to access the\ninstallation script and obtain database access credentials.\n\nSince the offending install step does not seem to be doing anything\nuseful, the corresponding code block has been commented out.\n\nThis vulnerability (CVE-2014-9571) was reported by High-Tech Bridge\nSecurity Research Lab (https://www.htbridge.com/) in issue #17937\n(advisory ID HTB23243).\n\nFixes #17939","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/5e5e57508f47f4fa2f04d4f14befbfc3d5b19f6f"},{"sha":"afacf2ec8669755de62984197c63f3a9f1f8ba31","author":{"email":"88fa846e5f8aa198848be76e1abdcb7d7a42d292@mantishub.net","name":"Victor Boctor"},"message":"Don't process history entries outside date range\n\nDon't process history entries outside date range\n\nThe following queries cut the number of queries in half:\n\n- Remove skip() method from events class since history api does the filtering.\n- When processing history events for an issue, only process ones within desired time range.\n\nBefore:\n- Total queries executed: 1232\n- Unique queries executed: 1231\n- Total query execution time: 0.7097 seconds\n\nAfter:\n- Total queries executed: 574\n- Unique queries executed: 573\n- Total query execution time: 0.2581 seconds\n\nIssue #17966","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/afacf2ec8669755de62984197c63f3a9f1f8ba31"},{"sha":"e7e2b5503580e42db9d91e0d599d61d3ff03c27e","author":{"email":"d9b599957bd54c22143053c16557076ca2185dbd@mantisbt.org","name":"Damien Regad"},"message":"Fix URL redirection issue in login_page.php\n\nThe fix for issue #17648 failed to correct all cases of redirection.\n\nAlejo Popovici discovered that the regex checking for URLs pointing to\nother domains considered an URL with a single '/' as local, allowing\nredirection e.g. to http:/google.com on certain browsers.\n\nFixes #17997 (CVE-2015-1042)","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/e7e2b5503580e42db9d91e0d599d61d3ff03c27e"},{"sha":"1eca39b1afce6b1687de6995e309b32abd7e5044","author":{"email":"d9b599957bd54c22143053c16557076ca2185dbd@mantisbt.org","name":"Damien Regad"},"message":"Simplify config file generation\n\n- Use a ternary operator\n- Remove redundant instructions to manually create the config file in\n  label: what the admin needs to do should be clear enough with the\n  error message and the text below.\n- Improve message to add lines to config file","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/1eca39b1afce6b1687de6995e309b32abd7e5044"},{"sha":"c3ae97107d59c06dd2a4c2707bbc3070f8a2cf19","author":{"email":"d9b599957bd54c22143053c16557076ca2185dbd@mantisbt.org","name":"Damien Regad"},"message":"Remove table background color\n\nThis makes the display of the various sections consistent (prior to\nthis, some had borders around cells and others didn't).\n\nAlso, bgcolor attribute is not supported in HTML5 so it makes sense to\nremove it for future compatibility.","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/c3ae97107d59c06dd2a4c2707bbc3070f8a2cf19"},{"sha":"e166f13383574af5ad7736dbed56b0dbc1bcb9d6","author":{"email":"d9b599957bd54c22143053c16557076ca2185dbd@mantisbt.org","name":"Damien Regad"},"message":"Remove ellipsis","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/e166f13383574af5ad7736dbed56b0dbc1bcb9d6"},{"sha":"d20c675fb6c493abbc52e2a9685a960dc14a882f","author":{"email":"d9b599957bd54c22143053c16557076ca2185dbd@mantisbt.org","name":"Damien Regad"},"message":"Start with 0 if given invalid install step","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/d20c675fb6c493abbc52e2a9685a960dc14a882f"},{"sha":"c205169416a60aeffbb9e8e0b2cca03f55084b7b","author":{"email":"d9b599957bd54c22143053c16557076ca2185dbd@mantisbt.org","name":"Damien Regad"},"message":"Display section title when starting with step 2","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/c205169416a60aeffbb9e8e0b2cca03f55084b7b"},{"sha":"d92b11a52a5d02e4f85cd37ed0f4e0634bc444c3","author":{"email":"d9b599957bd54c22143053c16557076ca2185dbd@mantisbt.org","name":"Damien Regad"},"message":"install.php tweaks\n\n- code cleanup\n- UI improvements\n- correct behavior in case of invalid install step","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/d92b11a52a5d02e4f85cd37ed0f4e0634bc444c3"},{"sha":"c60484570311cb64a3ea155a69caee6aa7ead94a","author":{"email":"dc548a8c362cf86d290c663311b10dac086658ee@kitano.nl","name":"Siebrand Mazeland"},"message":"Localisation updates from https://translatewiki.net.","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/c60484570311cb64a3ea155a69caee6aa7ead94a"},{"sha":"9b5fbe57c63c10cf5831dc9ee9e04bf8f6097dd9","author":{"email":"1a29f96d6ce2df9294a903b4ffad7129896e10b2@mantishub.net","name":"Rafik Robeal"},"message":"Timeline: fix [ More events... ] link\n\nBetter layout for timeline entries\n\nFixes #17918\n\nSigned-off-by: Damien Regad <dregad@mantisbt.org>","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/9b5fbe57c63c10cf5831dc9ee9e04bf8f6097dd9"},{"sha":"b6103c49bc86d42efb074fee40e2817f791d3237","author":{"email":"d9b599957bd54c22143053c16557076ca2185dbd@mantisbt.org","name":"Damien Regad"},"message":"Timeline CSS/HTML tweaks\n\n- avatar image now wrapped in a div\n- timestamp and action div with overflow hidden\n- simplification of CSS and generated HTML\n- tweaks and adjustments to padding and margins","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/b6103c49bc86d42efb074fee40e2817f791d3237"},{"sha":"065521c1f7832d12fd0b4ca47e7587caa214444b","author":{"email":"d9b599957bd54c22143053c16557076ca2185dbd@mantisbt.org","name":"Damien Regad"},"message":"Missing space before version suffix in footer\n\nRegression introduced by 004e69274d5f115b3a8977988a8df6b20de0e062","distinct":false,"url":"https://api.github.com/repos/dregad/mantisbt/commits/065521c1f7832d12fd0b4ca47e7587caa214444b"}]}