Release v1.5.11

This version is a bug-fix release that addresses numerous issues across multiple areas of mosparo.

Commands

• Fixed the broken export command, which didn’t get the new flags in v1.5. Reported by thelfensdrfer in #455.
• Fixed the broken import command, which didn’t get the new flags in v1.5. In connection with #455.
• Fixed an incorrect comparison that caused a duplicate import.
• Fixed the error handling in the mosparo:rule-package:import command.
• Fixed the error handling in the mosparo:self-update command.

Rules

• Fixed the random values submission rule type, which caused problems with array values and didn’t match the textarea fields correctly.
• Added the missing validation in the field rules editor when storing the data.
• Fixed the matching in the Unicode block rule type, which was case-sensitive.
• Fixed the matching in the IP address rule type. Subnets were not correctly matched, and differently written IP addresses didn’t match.

Interface

• Fixed a reflected HTML injection in the project search.
• Fixed a stored HTML injection in the rule package delete confirmation.

Frontend widget

• Fixed the handling of fields with names shorter than 3 characters.

API

• Frontend API, request-submit-token: Invalid locales are now ignored correctly and fall back to English.
• Verification API, store-metadata: Fixed incorrect data validation.
• Fixed an incorrectly set HTTP status code for a backend API request without an Authorization header.

Other

• Web cron job: The web cron job no longer stops working when a rule package generates an error.
• Rule package, JSON importer: The importer now correctly counts rule items, as with the ZIP importer.
• Fixed inverted logic in the clearCssCache method, which was doing the wrong thing regarding the shared cache.
• Added the correct escaping to handle translations in JavaScript parts of mosparo.
• Proof-of-work: Switched to random_int to get a more secure random number.
• Two-factor authentication: Use strict comparison for the backup codes.
• Updated the backend and validator translations.

Packaging

• Removed two files from the built ZIP package, reducing the package size by 17.86 MB. Reported by uluzox in #453

After updating to v1.5.11, mosparo needs to recalculate the prepared values and hashes. Please open the web interface after updating and wait until the process is finished.

We’re thankful to all contributors for reporting bugs, suggesting changes, translating strings, and, in general, for making mosparo better.