Last week got again more focus on bug fixing. Mostly those were again hardenings on our infrastructure and Docker image, but there were some fixes as well. Overall the phpMyAdmin docker image got much better and it will be be even better with upcoming 4.6.5 release which adds some improvements to the main codebase.
Handled issues:
- #12640 Missing SPF
- #12643 Missing SSL support in mail.phpmyadmin.net
- #12645 Add documentaton checks to be executed in Travis CI
- #12628 AJAX request for exporting SQL results causes 403 Forbidden error
- #12647 Use justBrowsing only if outputting the results from a single table
- #12646 Incorrect protocol number at 500 header
- #12631 Fix order of testing DBConnection with different parameters in Config method
- #12616 Refuse to work with mbstring.func_overload enabled
- #12632 Use IDENTIFIED BY 'auth_string' if password check plugin is active
- #64 Missing white-list of allowed HTTP methods (in nginx.conf)
- #63 increased attack surface by internal redirect in try_files option
- #67 Deny access to all hidden files
- #77 Improve nginx setup
- #73 User configuration not taken into account
- #74 Fix user configuration and add tests for it
- #76 Avoid encoding PHP version in socket or log name
- #68 Incorrect PHP log/socket name
- #71 Performance Improvements to Test
- #75 Optimize PHP opcache settings
- #69 not needed sections in php.ini
- #70 Missing optional dependencies:
- #33 Missing HSTS header
- #32 Missing Redirect to HTTPS from HTTP
- #34 HTTPS to HTTP Redirect
- #38 Exposed old (not latest) PMA interface with setup
- #6 Update id.po
- #4 Update id.po
- #5 Update id.po
