As the app is not generating the new APP_KEY for each installation each faveo installation share the same key to encrypt and decrypt. Since data encrypted from one installation can easily be used on another instance it makes system vulnerable to expose sensative data from the system and RCE vai deserialized payload
* Changed plugin settings to activate and deactivate plugin by removing update process for config/app.php file.
* Changed plugin ServiceProvider registration technique by removing hard coded code in AppServiceProvider. Now We are registering all plugins's ServiceProvider classes avaliable for active plugins with status as 1 in plugins table in database. It provides more dynaamicity to developers so they need not to worry about registering their custom plugin's ServiceProvider.
- Fixed API issues
- Updated release notes and readme files
- Updated dummy database files
- dumped composer to with --no-dev to ignore dev dependency
- ignored tests directory and phpunit.xml while downloading compressed archives of the repo
- Fixed loging method in CommonmailController
- Fixed mail config file
- Fixed attachment variable initalization in MailController
- Fixed sendEmail() method in PhpMailController passing empty array as default value for $template_variables
- Fixed Bugsnag reported issue for sendmail() which is happening for reports
- Added testing setup command for configuring testing db and environment
- Updated travis.yml to use MySQL service
Apply fixes from StyleCI
added user to access db in travis.yml
updates
updates
Apply fixes from StyleCI
Fixed issue with running testcases
Added file permission check in Probe.php for storage and bootstrap directories.
Named route bugs fixed reported on bugsnag
Removed sla-escalate atrisan command from kernal as the functionality is not working and which is causing the issue while running cron command in v1.10
###Very important update for emails
Handling cipher update scenario for decrypt email password
Not loading email passoword on edit page to secure email account
