project_issue_file_review 6.x-2.17

This release fixes security vulnerabilities.

Security fixes included in this release:

• Fixed cross-site scripting vulnerability in PIFR_Server administrative pages
• Fixed cross-site scripting vulnerability in PIFR_Server test results pages

Other bug Fixes included in this release:

• Fixed get_information function calls in client/review/db/sqlite.inc
• Support alternative drupal core repository URLs
• Fix 'pass-by-reference' php warnings when using php 5.4
• Fix missing vcs identifier on manual testing core test type
• Fix for sqlite undefined index notices
• Support non-mysql database drivers for Drupal 7+
• #2147027: D6 testbot broken Updated D6 simpletest patch to maintain D6 testing following Dec 2013 core security release
• Fix pgsql edit fields during install
• Fix for php fatal errors in pifr_server_review_summary_format()
• Revert the 'break on fail' logic in pifr_server_test_result()
• #2203095: Can not set environment conditions if project or branch exists multiple times Fix cannot set environment conditions if project or branch exists on multiple project clients

Feature changes included in this release:

Added PHP version check to environment selection algorithm

This feature introduced a new simpletest 'plugin_argument' parameter, which affects how tests are distributed to testbots. Environment configuration now supports a new 'phpversion' plugin argument. If an incoming branch test contains a [test.php.version] plugin argument, then it will only be sent to testbots which have a 'phpversion' plugin argument with the same value. If either (or both) of the plugin arguments do not exist, they default to a value of '5.3' ... this will not affect existing implementations if PIFR is rolled out alone, but users should be aware that the most recent versions of PIFT 7.x-2.x *do* send the [test.php.version] parameter, which is set to '5.4' for any Drupal 8+ core or contrib patch or branch tests.

As a result, if this PIFR upgrade is deployed alongside the most recent PIFT 7.x-2.x release, then Drupal 8+ tests will not be evaluated *unless* the phpversion:5.4 plugin argument is configured on a given environment. (Please Note that the "actual" php version on that environment is irrelevant; the parameter is used for environment selection, but does not otherwise affect target testbots running that environment.)