Redmine

2021-10-10

20:17 Feature #23980: Replace icon images with Tabler SVG icons

I made a demo patch that adds SVGs instead of icon fonts for issue page: ​
* rendering SVG inline (in HTML) make the... Marius BĂLTEANU

15:54 Defect #35789: Redmine is leaking usernames on activities index view

Thanks for the release. I have updated the security scanner with the new releases.
On Monday, I'll request a CVE e... Holger Just

12:08 Defect #35789: Redmine is leaking usernames on activities index view

I've updated the [[Security_Advisories]]. Holger, feel free to update based on the security scanner. Marius BĂLTEANU

11:59 Defect #35789 (Closed): Redmine is leaking usernames on activities index view

Marius BĂLTEANU

12:13 Redmine 4.2.3 and 4.1.5 released (security fix)

These 2 maintenance releases are available for [[download]], you can review the changes in the [[Changelog]].
*Sec... Marius BĂLTEANU

04:55 Revision 21247 (svn): tagged version 4.2.3

Go MAEDA

04:52 Revision 21246 (svn): tagged version 4.1.5

Go MAEDA

04:46 Revision 21245 (svn): Updates for 4.1.5 release.

Go MAEDA

04:33 Revision 21244 (svn): Merged r21243 from trunk to 4.2-stable (updates for 4.2.3 release).

Go MAEDA

04:10 Revision 21243 (svn): Updates for 4.2.3 release.

Go MAEDA

2021-10-09

13:12 Feature #35764 (Closed): Multiple search terms in the "contains" operator of text filters

Marius BĂLTEANU

08:50 Feature #35764 (Resolved): Multiple search terms in the "contains" operator of text filters

I've disabled for now the rubocop offense for Lint/IneffectiveAccessModifier. Jens, the method @self.tokenized_like_c... Marius BĂLTEANU

13:12 Feature #35073 (Closed): Escape values in LIKE statements to prevent injection of placeholders (_ or %)

All tests passed now. Marius BĂLTEANU

10:28 Feature #35742: Enable task list items for CommonMark text formatting

Really nice feature. This should be delivered in Redmine 5.0.0.
Marius BALTEANU wrote:
> I'm adding a patch for t... Go MAEDA

08:53 Defect #35090 (Confirmed): Permission check of the setting button on the issues page mismatches button semantics

Setting the target version to 4.1.5. Go MAEDA

08:52 Defect #35957 (Closed): MessagesControllerTest#test_post_new test fails (trunk)

Committed, thanks! Marius BĂLTEANU

08:52 Revision 21242 (svn): Fix random failing test introduced in r21130 (#35957, #34169).

Marius BĂLTEANU

08:47 Revision 21241 (svn): Disable rubocop Lint/IneffectiveAccessModifier for @self.tokenized_like_conditions@ in @app/models/query.rb@ (#35764).

Marius BĂLTEANU

08:35 Revision 21240 (svn): Explicitly specify escape character using an ESCAPE on SQLite (#35073).

Patch by Go MAEDA. Marius BĂLTEANU

2021-10-08

11:33 Defect #35965 (New): REST group api does not work when user is already member of group

This might be related to:
https://stackoverflow.com/questions/56767239/how-to-fix-user-is-invalid-error-when-adding... Wim Bertels