Notes

Release Name: 7.10

Notes:
Tuleap 7.10 (Thursday, February 5th 2015)
========================================

Features
-----------------------

    * request #7805: Remove CKEditor for IE7
    * request #7788: Force IE (< 9) and old Chrome versions to follow the declared content-type and content-disposition headers
    * request #7799: Token is stored in a dedicated cookie
    * request #7716: Update user details thru REST api
    * request #7723: Make project backup path customizable (contrib STMicrolelectronics).
    * story #7607: have tracker search in global search
    * story #7740: git anonymous http clone
    * Parts of story #6855: artifact copy: Recursive copy
    * Parts of story #7697: dedicated queue for grokmirror manifest updates
    * story #7496: see priority changes in artifact view
    * request #7710: Sort content of the userlist table after a header click (contrib STMicroelectronics).
    * request #7799: Regenerate token cookie if it's no more available
    * request #7799: Generate user_id cookie

Bug Fix
-----------------------

    * Fix unit tests for webdav & config & karma tests
    * request #7731: Columns defined as collapsed by default are not collapsed in cardwall report on dashboards
    * request #5550 Date reminder form messed with bootstrap
    * request #7750: Graph cumulative flow legend overlaps on graph
    * request #7751: Enhance Mediawiki administration UI
    * request #7673 Git errors when creating repo and dumping ssh keys
    * request #7715: Fix bad links to some users in admin user list
    * request #7764: docman fulltext search events broken
    * request #7770: Wrong data when there are two reports on project dashboard using the same field as filter
    * request #7774: fatal error on my personal page from docman
    * request #7792: Contributor semantic change should trigger FTS reindex
    * request #7796: Unable to configure tracker v5 default templates
    * request #7817 Docman fts actions are logged into the default queue instead of the fts one
    * Fix request #7815: Proftpd: Path are not well escaped when setting ACL

Plugins
-----------------------


### agiledashboard 1.149

    * story #7169: create a new item in milestone backlog of planning-v2
    * Log priority change when several artifacts are moved && Display priority changes in artifact modal
    * story #7496: Display priority changes likes an artifact change in follow-ups section
    * story #7496: Store context of the move when available and if the priority has been raised or not
    * story #7737: Add token in AD admin form
    * story #7737 - Deal with old value when Lab not activated
    * story #7737: Change 'Kanban' & 'Scrum' titles
    * story #7496: Store priority changes for the two impacted artifacts in database
    * story #7737: Deal with project creation
    * story #7737: Kanban own id
    * request #7762: notice on agiledashboard planning admin when adding a new column
    * Fix unit tests for webdav & config & karma tests
    * request #7759: Can't create new columns on the Agile Dashboard

### docman 2.26.65

    * request #7836: Fatal error while deleting a Wiki item
    * Fix request #7800: Fatal error while updating properties of a Link item
    * request #7788: Force IE (< 9) and old Chrome versions to follow the declared content-type and content-disposition headers
    * request #7788: Prevent persistent XSS in attachment of an artifact
    * request #7774: fatal error on my personal page from docman
    * request #7764: docman fulltext search events broken
    * story #7607: enabling tracker search on one project- UI logic only
    * story #7607: perform search according to category
    * request #7738 mandatory property for docman can be bypassed for multi-select properties

### fulltextsearch 0.121

    * request #7816: Do not stop batch indexation if one particular file cannot be indexed
    * request #7817 Docman fts actions are logged into the default queue instead of the fts one
    * index all last modified fields AND a dedicated last modified one
Part of story #7607
    * request #7792: Contributor semantic change should trigger FTS reindex
    * story #7607 - Search results execut scripts
    * story #7607: can change search terms without loosing facade filetering
    * story #7607: make search filter correctly by date on trackers
    * story #7607: artifact search results are enhanced with additional metadata
    * story #7607: searching in elasticsearch for tracker results
    * story #7607: enabling tracker search on one project- UI logic only
    * story #7607: current facets are always visible and you can choose projects that have no matching results
    * story #7607: perform search according to category
    * request #7744: Fix non persistent XSS and a open redirection in search modules and login form
    * More visible 'moar' button
    * Add icons to distinguish result types

### git 4.11

    * Fix request #7795 Lost browsing of git repository at upgrade
    * request #7315 Delete old embedded gitphp
    * story #7697: put all grok events into system events
    * story #7697: adding a grokmirror queue
    * Do not let anonymous clone things when platform forbid anonymous
    * story #7740: git anonymous http clone (Deal with private projects)
    * story #7740: git HTTP anonymous access
    * request #7760: Side by side diff in Git is not working
    * request #7673 Git errors when creating repo and dumping ssh keys

### graphontrackers 1.12

    * request #7750: Graph cumulative flow legend overlaps on graph

### graphontrackersv5 5.16

    * request #7750: Graph cumulative flow legend overlaps on graph

### ldap 3.71

    * Fix mistake in ldap.inc comment
    * Fix unit tests for webdav & config & karma tests
    * Fix request #7761: Fatal error when accessing default trackers templates
    * request #7757: LDAP daily sync now search in subtrees
    * request #7744: Fix non persistent XSS and a open redirection in search modules and login form

### mediawiki 0.61

    * request #7834 - Tuleap mediawiki extension break CSS
    * story #7689 - Create plugin for artifactLinks in Mediawiki
    * request #7751: Enhance Mediawiki administration UI

### openid 0.6

    * request #7744: Fix non persistent XSS and a open redirection in search modules and login form

### tests 5.27

    * request #7799: Token is stored in a dedicated cookie

### tracker 5.568

    * request #7840: Fix XSS when importing artifacts in tracker
    * request #7838 - TV3 warning while I am copying a TV5 artifact
    * fix create artifacts
    * story #7169: create a new item in milestone backlog of planning-v2
    * request #7796: Unable to configure tracker v5 default templates
    * request #7788: Force IE (< 9) and old Chrome versions to follow the declared content-type and content-disposition headers
    * request #7792: Contributor semantic change should trigger FTS reindex
    * Fix priority has been marked as raised even if it doesn't change
    * Log priority change when several artifacts are moved && Display priority changes in artifact modal
    * story #7496: Keep history only when the admin check the option in tracker admin
    * story #7496: Display priority changes likes an artifact change in follow-ups section
    * request #7788: Prevent persistent XSS in attachment of an artifact
    * story #6855 - Refactor ChildrenCollector in right path
    * story #7496: Store context of the move when available and if the priority has been raised or not
    * story #7496: Add an option in Tracker general
    * story #7496: Store priority changes for the two impacted artifacts in database
    * story #6855 - Aggregate error messages in a followup comment
    * Display error message if MAX is reached && Set a proper child limit
    * Let the user choose if the children must be copied
    * request #7770: Wrong data when there are two reports on project dashboard using the same field as filter
    * story #7607: make search filter correctly by date on trackers
    * story #7607: artifact search results are enhanced with additional metadata
    * story #7607: searching in elasticsearch for tracker results
    * story #7607: enabling tracker search on one project- UI logic only
    * Remove simplexml infinite loop
    * story #7607: perform search according to category
    * story #6855 - artifact copy: Recursive copy
XML export of an artifact has now a new field exported: artifact link.
This field expose only children of the artifact, other relations are
ignored.
    * Fix request #7761: Fatal error when accessing default trackers templates
    * request #7750: Graph cumulative flow legend overlaps on graph

### tracker_date_reminder 1.2.9

    * request #5550 Date reminder form messed with bootstrap

### webdav 1.9.7

    * Fix unit tests for webdav & config & karma tests

Themes
-----------------------

    * FlamingParrot: 1.65

Development
-----------------------

    * Update less.sh uncompiled files

Security
-----------------------

    * request #7786: Enable browser built-in protection against XSS
    * request #7788: Prevent persistent XSS in attachment of an artifact
    * request #7755: Fix non persistent XSS and open redirect in redirect page
    * request #7730: Add entropy into the session ID and the password reset token
    * request #7754: Prevent denial of service via the login form
    * request #7744: Fix non persistent XSS and a open redirection in search modules and login form
    * request #7785: Protection against clickjacking

Changes:

References

List of items referenced by or referencing this item.