- Jul 01, 2019
-
-
aydreeihn authored
In the event that we receive an email where the reply-to header is formatted with the name being an unquoted email, we should correct the name by inserting the quotes. Incorrect Format: adriane@enhancesoft.com <adriane@enhancesoft.com> Correct Format: "adriane@enhancesoft.com" <adriane@enhancesoft.com>
-
- Apr 24, 2019
-
-
Peter Rotich authored
Conflicts: WHATSNEW.md include/client/header.inc.php
-
Peter Rotich authored
-
JediKev authored
This updates jQuery to the latest stable release of v3.4.0.
-
Peter Rotich authored
-
Peter Rotich authored
xss: XSS To LFI Vulnerability
-
JediKev authored
This addresses a vulnerability found by [AkkuS CW](https://pentest.com.tr) where a simple XSS attempt can lead to an LFI (Local File Inclusion) attack. The issue stems from the system returning the unformatted file contents in an error message when uploading a CSV to the User Importer. This formats the contents before uploading so that if the contents are returned in an error message they will not be executed by the browser which therefore prevents XSS attempts and the possibility of an LFI attack. This also formats all the user-created data sent to ImportError to prevent the same issue.
-
- Apr 23, 2019
-
-
Peter Rotich authored
-
Peter Rotich authored
-
Peter Rotich authored
-
Peter Rotich authored
issue: .eml/.msg Attachments
-
Peter Rotich authored
Ticket Link: Always return a link
-
Peter Rotich authored
Mailer: Allow for ability to pass -f option as from_address
-
- Apr 22, 2019
-
-
Peter Rotich authored
-
Peter Rotich authored
-
Peter Rotich authored
Bug fixes and enhancements for v1.11
-
Peter Rotich authored
issue: Task EstDueDate
-
aydreeihn authored
-
JediKev authored
This addresses an issue where having the `%{task.due_date}` variable in a Task alert template whilst creating a Task with an Assignee causes a fatal error in the backend leaving the Create Task modal spinning forever. This is due to the `getVar()` method for Tasks where the `due_date` case references a non-existing method. This updates the referenced method to an existing method so it gets the correct value and does not cause a fatal error.
-
- Apr 18, 2019
-
-
Peter Rotich authored
jquery: Update Again
-
Peter Rotich authored
Issues since v1.11 release
-
Peter Rotich authored
Mime Decode - Encoded chars
-
Peter Rotich authored
PJAX: Increase default timeout
-
Peter Rotich authored
MPDF Tasks
-
- Apr 17, 2019
-
-
JediKev authored
This updates jQuery to the latest stable release of v3.4.0.
-
JediKev authored
This addresses an issue where `.eml` and `.msg` files on incoming mails are being dropped. This is due the the mail fetcher that tries to process `.eml`/`.msg` files and adds them as thread entries rather than adding them as attachments. This adds a new section that utilizes a new method to fetch the body of `.eml`/`.msg` files, fetches the subjects of the `.eml`/`.msg` files as the attachment names, and creates attachments. This preserves the `.eml` and `.msg` files and adds them to the pertinent thread entries as attachments.
-
aydreeihn authored
Conflicts: include/class.pdf.php
-
aydreeihn authored
Use the psize that is set in the options array since $psize is not in the Task2PDF contructor.
-
Peter Rotich authored
-
Peter Rotich authored
Increase default pjax timeout to 30 seconds to avoid double requests & reloads.
-
Peter Rotich authored
-
Peter Rotich authored
-
Peter Rotich authored
-
- Apr 16, 2019
-
-
Peter Rotich authored
This commit addresses an issue where pre_replace fails in php 7.x resulting in a ticket with an empty body.
-
Peter Rotich authored
Use dept_id provided with the assumption that the caller validated it- this helps to avoid unnecessary database lookup.
-
Peter Rotich authored
-
Peter Rotich authored
-
Peter Rotich authored
This is necessary to avoid expensive db lookup when displaying tickets queues.
-
Peter Rotich authored
-
Peter Rotich authored
-