JediKev
|
8d38b06196
|
Add Release Notes for v1.18.4
v1.18.4
|
2026-06-17 22:01:48 +00:00 |
|
JediKev
|
93c2d125e2
|
Merge branch '1.17.x' into develop
|
2026-06-17 22:00:04 +00:00 |
|
JediKev
|
a1114e5298
|
Add Release Notes for v1.17.8
v1.17.8
|
2026-06-17 21:55:42 +00:00 |
|
JediKev
|
13122d1ec9
|
Merge pull request #6959 from JediKev/security/latest-patches-06-2026
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-06-17 16:48:29 -05:00 |
|
JediKev
|
6558b33225
|
security: FAQ Print
This addresses a report submitted by Michael Bommarito in regards to
external image handling in FAQ PDF exports.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
2a0c388fc8
|
security: User AJAX
This addresses a report submitted by LXY in regards to user profile and
preview access through staff AJAX.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
b4ede885cc
|
security: Thread Entry Reuse
This addresses a report submitted by LXY in regards to thread entry reuse in
new-ticket workflows.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
119cefe516
|
security: Thread Actions
This addresses a report submitted by LXY in regards to thread action
authorization for ticket and task operations.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
5ff9795ef3
|
security: User Org AJAX
This addresses a report submitted by LXY in regards to user organization
updates through staff AJAX.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
5600f94962
|
security: Pwreset Token Expiration
This addresses a report submitted by Charton93 in regards to password reset
token expiration window handling.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
d457c146a5
|
security: Template Vars
This addresses a report submitted by luke.hebenstreit@outlook.com in regards
to template variable resolution for sensitive object values.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
b4cc0925c2
|
security: Login-Required Policy
This addresses a privately reported issue in regards to enforcing
login-required policy before ticket creation.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
eaebe0176e
|
security: Note AJAX
This addresses a report submitted by sliao25@m.fudan.edu.cn in regards to
Note AJAX authorization.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
d590a9770d
|
security: Ticket Field View
This addresses a report submitted by Juan Felipe Oz (@JF0x0r) in regards to
ticket field view authorization.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
596379768a
|
security: Hash Comparison
This addresses a report submitted by Nozomu Sasaki (Paul) in regards to
session validation hash comparison.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
b535782a0a
|
security: CSRF
This addresses a report submitted by Khaled M. Alshammri (@ik0z) in regards
to CSRF enforcement for state-changing request methods.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
580e1c87ec
|
security: API Key Logging
This addresses a report submitted by Khaled M. Alshammri (@ik0z) in regards
to API key handling in system logs.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
ba6217a718
|
security: Staff Password Reset
This addresses a report submitted by Khaled M. Alshammri (@ik0z) in regards
to staff password reset response handling.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
7bbd8ab209
|
security: Request Method
This addresses a report submitted by Khaled M. Alshammri (@ik0z) in regards
to method override handling for state-changing routes.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
fd96bbabc9
|
security: Recipient Name
This addresses a report submitted by Khaled M. Alshammri (@ik0z) in regards
to collaborator and recipient name rendering.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
e52e01005b
|
security: File Exception Handling
This addresses a report submitted by Khaled M. Alshammri (@ik0z) in regards
to file error handling and diagnostic output.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
98abb059b1
|
security: File URL Signatures
This addresses a report submitted by Khaled M. Alshammri (@ik0z) in regards
to file URL signature validation.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
078516ed03
|
security: Inline SVGs
This addresses a report submitted by Khaled M. Alshammri (@ik0z) in regards
to inline handling of SVG attachments.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
6eb6b98996
|
security: HTTP_REFERER Typo
This addresses a report submitted by Anindya Sankar Roy (fr3ak) in regards
to staff login referrer handling.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
feccb6a3a9
|
security: API Keys
This addresses a report submitted by Anindya Sankar Roy (fr3ak) in regards
to API key generation.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
1e39bf1cf7
|
security: Thread Entry Titles
This addresses hardening identified from a report submitted by Anindya
Sankar Roy (fr3ak) in regards to thread entry title rendering.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
c54a6ac79d
|
security: Email Display Names
This addresses a report submitted by Anindya Sankar Roy (fr3ak) in regards
to rendering email display names in thread entries.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
5afdf5450f
|
security: Bootstrap Tooltip
This addresses a report submitted by frgranier@deloitte.fr in regards to
tooltip behavior and data attributes in sanitized content.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
52c366f57b
|
security: Full-Text Search
This addresses a report submitted by Huseyn (meKhatai) Gadashov in regards
to full-text search mode handling for user-crafted search terms.
|
2026-06-17 16:13:23 -05:00 |
|
JediKev
|
2570d69892
|
Add Release Notes for v1.18.3
v1.18.3
|
2026-01-15 17:17:15 +00:00 |
|
JediKev
|
51f9249b8a
|
Merge branch '1.17.x' into develop
|
2026-01-15 17:14:32 +00:00 |
|
JediKev
|
a18df93cdb
|
Add Release Notes for v1.17.7
v1.17.7
|
2026-01-15 17:12:24 +00:00 |
|
JediKev
|
c3819e4d21
|
Revert "issue: Guest Session TTL"
This reverts commit 416b548bd8.
|
2026-01-15 17:04:39 +00:00 |
|
JediKev
|
c59b067dbf
|
Merge pull request #6911 from JediKev/security/latest-patches-01-2026
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 11:01:28 -06:00 |
|
JediKev
|
d51301dbcb
|
Merge pull request #6910 from JediKev/htmlawed/upgrade-to-1.2.15
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 10:56:59 -06:00 |
|
JediKev
|
d832f24332
|
security: Pwreset Hardening
This mitigates a report submitted by Ruben Ferreira of CSA Cyber in
regards to password reset.
|
2026-01-15 10:44:00 -06:00 |
|
JediKev
|
0e599be671
|
Merge pull request #6909 from JediKev/issue/regex-or-operator-2
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 09:55:00 -06:00 |
|
JediKev
|
0ce88a7f0e
|
Merge pull request #6908 from JediKev/rebase/pull-6034
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 09:54:39 -06:00 |
|
JediKev
|
6caaa640a2
|
Merge pull request #6878 from nicoletta-maia/1.17.x-banlist
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 09:54:18 -06:00 |
|
JediKev
|
914474f8cd
|
Merge pull request #6906 from JediKev/rebase/pull-6861
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 09:54:00 -06:00 |
|
JediKev
|
a923946c75
|
Merge pull request #6904 from JediKev/rebase/pull-6872
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 09:53:41 -06:00 |
|
JediKev
|
ef6ed9a4d4
|
Merge pull request #6903 from JediKev/rebase/pull-6883
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 09:52:40 -06:00 |
|
JediKev
|
dbebe9d043
|
Merge pull request #6902 from JediKev/issue/empty-dept-error-on-topic-update
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 09:52:23 -06:00 |
|
JediKev
|
84b8baee1e
|
Merge pull request #6901 from JediKev/issue/pgp-smime-mail-parsing
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 09:52:10 -06:00 |
|
JediKev
|
0d6cb83bab
|
Merge pull request #6900 from JediKev/issue/microsoft-utf8-bom
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 09:51:55 -06:00 |
|
JediKev
|
fbe4bb99ef
|
Merge pull request #6899 from JediKev/issue/trim-user-name
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 09:51:30 -06:00 |
|
JediKev
|
a0a7a3f3a8
|
Merge pull request #6898 from JediKev/issue/date-column-interval
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 09:51:10 -06:00 |
|
JediKev
|
0008042ce9
|
Merge pull request #6887 from JediKev/issue/pop-oauth2-error-regex
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 09:50:50 -06:00 |
|
JediKev
|
baf1e0a226
|
Merge pull request #6874 from JediKev/issue/svg-mime-type
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 09:50:28 -06:00 |
|
JediKev
|
ea7ecbb6e1
|
Merge pull request #6897 from JediKev/mpdf/upgrade-to-v8.2.7
Reviewed-By: JediKev <kevin@enhancesoft.com>
|
2026-01-15 09:50:00 -06:00 |
|