If an alert is enabled for only the Department Manager and the Department Recipients field is set to No one, the Department Manager still receives a notification.

If the recipients field is set to no one, nobody should receive an alert regardless of what is checked on the New Ticket Alert selections.

To fix this, we can do a count of what the getMembersForAlerts function returns. This function compares what is set for a Department's group_membership in the database to the ALERTS_DISABLED constant to return a query set of members that should receive an alert. If the count is 0, we know that alerts should be disabled.

Conflicts:
	WHATSNEW.md
	include/client/header.inc.php

This updates jQuery to the latest stable release of v3.4.0.

xss: XSS To LFI Vulnerability

This addresses a vulnerability found by [AkkuS CW](https://pentest.com.tr)
where a simple XSS attempt can lead to an LFI (Local File Inclusion) attack.
The issue stems from the system returning the unformatted file contents in
an error message when uploading a CSV to the User Importer. This formats the
contents before uploading so that if the contents are returned in an error
message they will not be executed by the browser which therefore prevents
XSS attempts and the possibility of an LFI attack. This also formats all the
user-created data sent to ImportError to prevent the same issue.

issue: .eml/.msg Attachments

Ticket Link: Always return a link

Mailer: Allow for ability to pass -f option as from_address

Bug fixes and enhancements for v1.11

issue: Task EstDueDate

This addresses an issue where having the `%{task.due_date}` variable in a
Task alert template whilst creating a Task with an Assignee causes a fatal
error in the backend leaving the Create Task modal spinning forever. This is
due to the `getVar()` method for Tasks where the `due_date` case references
a non-existing method. This updates the referenced method to an existing
method so it gets the correct value and does not cause a fatal error.

jquery: Update Again

Issues since v1.11 release

Mime Decode - Encoded chars

PJAX: Increase default timeout

MPDF Tasks

This updates jQuery to the latest stable release of v3.4.0.

This addresses an issue where `.eml` and `.msg` files on incoming mails are
being dropped. This is due the the mail fetcher that tries to process
`.eml`/`.msg` files and adds them as thread entries rather than adding them
as attachments. This adds a new section that utilizes a new method to fetch
the body of `.eml`/`.msg` files, fetches the subjects of the `.eml`/`.msg`
files as the attachment names, and creates attachments. This preserves the
`.eml` and `.msg` files and adds them to the pertinent thread entries as
attachments.

 Conflicts:
	include/class.pdf.php

Use the psize that is set in the options array since $psize is not in the Task2PDF contructor.

Increase default pjax timeout to 30 seconds to avoid double requests  &
reloads.

This commit addresses an issue where pre_replace fails in php 7.x resulting
in a ticket with an empty body.

Use dept_id provided with the assumption that the caller validated it- this
helps to avoid unnecessary database lookup.

This is necessary to avoid expensive db lookup when displaying tickets
queues.