Merge branch '13x' into hotfix/2.3.1

# Conflicts:
#	Source/MantisSourceBase.class.php
#	docs/CHANGELOG.md

Author: dregad

Source/MantisSourceBase.class.php

@@ -19,7 +19,7 @@ abstract class MantisSourceBase extends MantisPlugin
 	 * a change in the minimum required MantisBT version: 0=1.2; 1=1.3, 2=2.x.
 	 * The framework version is incremented when the plugin's core files change.
 	 */
-	const FRAMEWORK_VERSION = '2.3.0';
+	const FRAMEWORK_VERSION = '2.3.1';
 
 	/**
 	 * Minimum required MantisBT version.

Source/pages/repo_delete.php

@@ -10,7 +10,8 @@
 
 $t_repo = SourceRepo::load( $f_repo_id );
 
-helper_ensure_confirmed( sprintf( plugin_lang_get( 'ensure_delete' ), $t_repo->name ), plugin_lang_get( 'delete_repository' ) );
+$t_message = sprintf( plugin_lang_get( 'ensure_delete' ), string_attribute( $t_repo->name ) );
+helper_ensure_confirmed( $t_message, plugin_lang_get( 'delete_repository' ) );
 
 SourceRepo::delete( $t_repo->id );
 

docs/CHANGELOG.md

@@ -224,6 +224,14 @@ Includes all changes and fixes from [1.5.0](#150---2017-03-06).
 
 # Releases for MantisBT 1.3
 
+## [1.6.2] - 2020-02-13
+
+### Security
+
+- Fix XSS in Delete Repository page (CVE request pending)
+  [#338](https://github.com/mantisbt-plugins/source-integration/issues/338)
+
+
 ## [1.6.1] - 2019-03-26
 
 ### Fixed
@@ -244,7 +252,7 @@ Includes all changes and fixes from [1.5.0](#150---2017-03-06).
 
 ### Security
 
-- Fix XSS in Manage Repository and Changesets List pages (CVE request pending)
+- Fix XSS in Manage Repository and Changesets List pages (CVE-2018-16362)
   [#286](https://github.com/mantisbt-plugins/source-integration/issues/286)
 
 ## [1.5.8] - 2018-08-30
@@ -481,8 +489,9 @@ Includes all changes and fixes from master-1.2.x branch, up to commit
 [2.0.0-beta.2]: https://github.com/mantisbt-plugins/source-integration/compare/v2.0.0-beta.1...v2.0.0-beta.2
 [2.0.0-beta.1]: https://github.com/mantisbt-plugins/source-integration/compare/v1.5.2...v2.0.0-beta.1
 
-[Unreleased 1.x]: https://github.com/mantisbt-plugins/source-integration/compare/v1.6.1...master-1.3.x
+[Unreleased 1.x]: https://github.com/mantisbt-plugins/source-integration/compare/v1.6.2...master-1.3.x
 
+[1.6.2]: https://github.com/mantisbt-plugins/source-integration/compare/v1.6.1...v1.6.2
 [1.6.1]: https://github.com/mantisbt-plugins/source-integration/compare/v1.6.0...v1.6.1
 [1.6.0]: https://github.com/mantisbt-plugins/source-integration/compare/v1.5.9...v1.6.0
 [1.5.9]: https://github.com/mantisbt-plugins/source-integration/compare/v1.5.8...v1.5.9