osTicket supports filtering allowable files on the client-side via JS as
well as server-side on upload.

Ajax based upload skipped server-side validation with the assumption that
the client already validated the file upload. For most cases this is a valid
assumption (ajax only works if JS is enabled) but fails to account for cases
where HTTP requests is intercepted and changed on transit or the request is
posted directly to the ajax interface.

This commit forces server-side file upload validation.

Catch InconsistentModelException on config load to allow for fallback to old
config table when upgrade is pending.

This is commit reverts prior commit to prevent email loops by dead-banning
alerts and auto-responses based on recent communication with the end user.

Cast email adddress to string

Require subject and message go send mail filter action

Dept::getMembersForAlerts can return an empty array instead of query-set

Auto-assign to closing staff or the last respondent if the agent is available
and has access. Otherwise, put the ticket back to unassigned pool.

Column based sorting got removed in favor of drop down based sorting in commit
number fa327c. It's being returned due to negative feedback we received from users.

Make tasks actions icon based buttons
Fix task assignment issue

This changes the typeahead to redirect directly from the typeahead click
rather than redirecting after performing the search a second time on the
ticket queue page.

Use CsvImporter util to importing items
Fix items search

Fixes #2751

This adds a command-line module named `serve` which adds a module to run the
command-line built-in PHP server with a router file that will properly
handle the expected URL dispatchers for the pages/, api/, and apps/ magic
URLs.

Usage:

$ php manage.php serve --help

Allow fields to internally define the render mode. This allows for fields to
to self render in a view mode when it's not editable.

Allow changing/saving setting/properties on internal ticket statuses. With
the exception of the state.

Add internal editable property used by internal forms to control of a field
is editable or not. This is not to be confused with form field properties
which are meant for general forms.

Add canned attachments to allowed files list when a canned response is used.

Add ability to disable use of authentication tokens on ticket links