Additional files for PDF/Latex

Our changes

Set version to 5.19.2

Merge remote-tracking branch 'security/security-fixes' into 5.19

Merge pull request #15897 from seamuslee001/dev_core_1409_519

dev/core#1409 Remove net_amount from Addtional Payment form

Merge branch 'security_release_release_notes' into 'security-fixes'

Release notes for 5.19.2 Release

See merge request security/core!89

dev/core#1409 Remove net_amount from Addtional Payment form

This is causing a validation problem. We used to have an issue on the contribution form which we eventually
resolved by removing net_amount as it's best calculated anyway

In order to make this changed I had to ensure Payment.create adds the net_amount & had
to do a couple of tweaks for the test to pass

Backport additional test functions and update API to get tests to pass

Merge branch 'public_release_fixes' into 'security_release_release_notes'

Update release notes for Public MRs being merged into 5.19

See merge request security/core!93

Update 5.19.2.md

Update 5.19.2.md

Merge pull request #15893 from seamuslee001/cce_fix_cancel_date_5_19

dev/core#1391 - Fix contribution cancel_date not being loaded

Merge pull request #15896 from seamuslee001/dev_core_1374_5_19

dev/core#1374 Fix search formValue handling on contribu…

Merge pull request #15894 from seamuslee001/dev_core_1406_519

dev/core#1406 Ensure that we use the CRM_Member_DAO_Membership as dao…

Update release notes for Public MRs being merged into 5.19

dev/core#1374 dev/core#1374 Fix search formValue handling on contribution search

dev/core#1406 Ensure that we use the CRM_Member_DAO_Membership as dao for the civicrm_membership table

dev/core#1391 - Fix contribution cancel_date not being loaded

This fixes an issue where the contribution cancel_date is not loaded
in the contribution search, causing cancelled contributions not to be
greyed out and the cancel date not to be shown.

Update 5.19.2.md

Update 5.19.2.md

Update 5.19.2.md

Merge branch 'security_core_70' into 'security-fixes'

security/core#70 Update Symfony packages to be the latest versions

See merge request security/core!92

Merge branch 'security_core_62_apiv4_join' into 'security-fixes'

Ensure that APIv4 Properly filters out permissable fields when no permission to view field exists

See merge request security/core!91

ContactApiKeyTest - Add additional test-case

This case was failing before but now passes with the update

Ensure that APIv4 Properly filters out permissable fields when no permission to view field exists

Update to latest versions of polyfill-ctype and polyfill-iconv

securiry/core#70 Upgrade Symfony version to 2.8.50

Minor update to release notes

Update release notes as per Tim's copy editing of the SA

Release notes for 5.19.2 Release

Merge branch 'security_core_46' into 'security-fixes'

Implement xKerman/restricted-unserialize package to guard against unsafe unserialize

See merge request security/core!87

Update unit test to match the output of the CRM_Utils_String function

SavedSearch API - Only accept safe inputs

CRM_Utils_String::unserialize() - Add wrapper for parsing safe exprs (int/string/array/etc)

[NFC] Update Doc block as per Patrick

Revert changes in CRM/Core/BAO{Cache|ConfigSetting}.php CRM/Extension/ClassLoader.php CRM/Queue and CRM/Utils/Cache

Return FALSE instead of throwing Exception if package throws Exception

Implement xKerman/restricted-unserialize package to guard against unsafe unserialize

ContactInterchangeTest - Add coverage for APIv4 joins/chains

(security/core#67) Port APIv3's escaping scheme to APIv4

HTMLInputCoder - Add more variants for encoding arrays

Fix unit test for APIv4 format

Fix api_key handling from joins

security/core#65 - Fix XSS in Dashboard Report Title

This fixes an XSS in report titles displayed on the dashboard page
by escaping the title on output.

security/core#65 Fix Display of Report title that contains XSS in it when shown on dashboard

security/core#59 - Fix SQL injection in civicrm/ajax/dedupefind

This fixes an SQL injection in civicrm/ajax/dedupefind by validating
the order direction parameter.

Fixes #59

Merge pull request #15788 from seamuslee001/5_19_1_version_bump_release_notes

Bump version and add in release notes for a 5.19.1 drop

Update 5.19.1.md

Add in release notes for 5.19.1 drop

Set version to 5.19.1

Merge pull request #15780 from seamuslee001/dev_mailing_56_5_19

dev/mailing#56 dev/mailing#57 Ensure that we don't pass in any namesp…

dev/mailing#56 dev/mailing#57 Ensure that we don't pass in any namespaced fields when building the row array for mailing reports

Merge pull request #15766 from seamuslee001/dev_core_1376_5_19

dev/core#1376 Catch Invalid Argument Exception when looking for APIv4…

Merge pull request #15763 from seamuslee001/dev_core_1371_5_19

dev/core#1371 Fix e-notice caused by trying to pass in known info to …

dev/core#1376 Catch Invalid Argument Exception when looking for APIv4 Services

dev/core#1371 Fix e-notice caused by trying to pass in known info to the extension downloader when checking requirements

Set version to 5.19.0

Merge pull request #15752 from agh1/5.19.0-releasenotes-final

5.19.0 release notes: added late changes

Update 5.19.0.md

5.19.0 release notes: added late changes

Merge pull request #15741 from totten/5.19-volinst

(dev/core#1093) Fix regression during extension activation

(dev/core#1093) Fix permission error when activating extension

Overview
--------

This fixes a recent/unreleased regression from #15726 in which the D7 demo build fails.

Before
------

When running `civibuild reinstall ...` on a `drupal-demo` site, it fails at this step:

```
+++ drush -y cvapi extension.install key=org.civicrm.volunteer debug=1
Authorization failed                                                                                                                                                   [error]
Array
(
    [error_code] => unauthorized
    [entity] => Extension
    [action] => install
    [trace] => #0 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/Civi/API/Kernel.php(166): Civi\API\Kernel->authorize(Object(Civi\Api4\Provider\ActionObjectProvider), Object(Civi\Api4\Generic\DAOSaveAction))
1 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/Civi/Api4/Generic/AbstractAction.php(235): Civi\API\Kernel->runRequest(Object(Civi\Api4\Generic\DAOSaveAction))
2 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/CRM/Utils/Migrate/Import.php(374): Civi\Api4\Generic\AbstractAction->execute()
3 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/CRM/Utils/Migrate/Import.php(82): CRM_Utils_Migrate_Import->customFields(Object(SimpleXMLElement), Array)
4 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/tools/extensions/civivolunteer/CRM/Volunteer/Upgrader.php(836): CRM_Utils_Migrate_Import->runXmlElement(Object(SimpleXMLElement))
5 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/tools/extensions/civivolunteer/CRM/Volunteer/Upgrader.php(48): CRM_Volunteer_Upgrader->executeCustomDataTemplateFile('volunteer-custo...')
6 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/tools/extensions/civivolunteer/CRM/Volunteer/Upgrader/Base.php(306): CRM_Volunteer_Upgrader->install()
7 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/tools/extensions/civivolunteer/volunteer.civix.php(131): CRM_Volunteer_Upgrader_Base->onInstall()
8 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/tools/extensions/civivolunteer/volunteer.php(204): _volunteer_civix_civicrm_install()
9 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/CRM/Extension/Manager/Module.php(76): volunteer_civicrm_install()
10 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/CRM/Extension/Manager/Module.php(48): CRM_Extension_Manager_Module->callHook(Object(CRM_Extension_Info), 'install')
11 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/CRM/Extension/Manager.php(264): CRM_Extension_Manager_Module->onPreInstall(Object(CRM_Extension_Info))
12 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/api/v3/Extension.php(58): CRM_Extension_Manager->install(Array)
13 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/Civi/API/Provider/MagicFunctionProvider.php(101): civicrm_api3_extension_install(Array)
14 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/Civi/API/Kernel.php(168): Civi\API\Provider\MagicFunctionProvider->invoke(Array)
15 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/Civi/API/Kernel.php(99): Civi\API\Kernel->runRequest(Array)
16 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/api/api.php(23): Civi\API\Kernel->runSafe('extension', 'install', Array, NULL)
17 /Users/myuser/bknix/build/dmaster/web/sites/all/modules/civicrm/drupal/drush/civicrm.drush.inc(1557): civicrm_api('extension', 'install', Array)
18 phar:///Users/myuser/bknix/civicrm-buildkit/extern/drush8.phar/includes/command.inc(422): drush_civicrm_api('extension.insta...', 'key=org.civicrm...', 'debug=1')
19 phar:///Users/myuser/bknix/civicrm-buildkit/extern/drush8.phar/includes/command.inc(231): _drush_invoke_hooks(Array, Array)
20 phar:///Users/myuser/bknix/civicrm-buildkit/extern/drush8.phar/includes/command.inc(199): drush_command('extension.insta...', 'key=org.civicrm...', 'debug=1')
21 phar:///Users/myuser/bknix/civicrm-buildkit/extern/drush8.phar/lib/Drush/Boot/BaseBoot.php(67): drush_dispatch(Array)
22 phar:///Users/myuser/bknix/civicrm-buildkit/extern/drush8.phar/includes/preflight.inc(66): Drush\Boot\BaseBoot->bootstrap_and_dispatch()
23 phar:///Users/myuser/bknix/civicrm-buildkit/extern/drush8.phar/includes/startup.inc(465): drush_main()
24 phar:///Users/myuser/bknix/civicrm-buildkit/extern/drush8.phar/includes/startup.inc(369): drush_run_main(false, '/', 'Phar detected. ...')
25 phar:///Users/myuser/bknix/civicrm-buildkit/extern/drush8.phar/drush(114): drush_startup(Array)
26 /Users/myuser/bknix/civicrm-buildkit/extern/drush8.phar(10): require('phar:///Users/t...')
27 {main}
    [is_error] => 1
    [error_message] => Authorization failed
)
```

After
-----

It works again.

Merge pull request #15726 from MiyaNoctem/dev-core-1093-fix-installation-of-custom-fields-with-option-values

dev/core#1093: Fix Installation of Custom Fields with Option Values From XML

Merge pull request #15724 from MiyaNoctem/dev-core-1360-fix-programatic-installation-of-extensions-v519

dev/core#1360: Fix Programatic Installation Of Multiple Extensions on v5.19

dev/core#1093: Fix Installation of Custom Fields with Option Values From XML

dev/core#1360: Fix Programatic Installation Of Multiple Extensions

Merge pull request #15690 from seamuslee001/nfc_authorize_test_fix

[NFC] Fix AuthorizeNet Test failure due to credit card being expired

[NFC] Fix AuthorizeNet Test failure due to credit card being expired

Merge pull request #15657 from demeritcowboy/pledge-search-backport

dev/core#1348 - pledge search not working backport of 15656

Merge pull request #15655 from demeritcowboy/activity-search-form-values

dev/core#1348 - backport of PR 15654

pledge search not working

activity search not working at all

Merge pull request #15642 from MiyaNoctem/dev-core-1093-backport-fix-to-v5.19-rc

dev/core#1093: Bckport Fix to v.5.19 to Add Custom Fields to Logging Tables

dev/core#1093: Add Custom Fields to Logging Tables

BulkSave method was adding fields to custom group table, but not to custom
group logging table. If these tables were updated on installation, before all
the schema is synced bewtween main and logging tables, fatal errors would be
thrown, as triggers tried to insert info into log tables missing required
fields.

Fixed by building log table after all fields are added to main table, and
before rebuilding triggers.

Merge pull request #15598 from alifrumin/rn5.19

5.19 Release Notes - first pass of sorting, annotating and editing

5.19 Release Notes - first pass

Merge pull request #15583 from seamuslee001/5.19

5.18.4 Release notes

Update 5.18.4.md

5.18.4.md

There was some ambiguity between original problem-report and PR-description.
Update per MM.

release-notes/5.18.4.md

Merge pull request #15569 from eileenmcnaughton/pay_notice

Enotice fix (unreleased enotice)

Merge pull request #15537 from eileenmcnaughton/pay_check

Fix a regression whereby payment details are not saved from the AdditionalPayment form

Enotice fix

per https://github.com/civicrm/civicrm-core/pull/15545#issuecomment-544531438

Support payment related fields on Payment.Create

On some digging I found that various payment related fields like pan_truncation & card_type_id were
being quietly ignored rather than saved by Payment.create

The additional payment form now uses this api so it is a regression on that form.

This fixes the metadata, tests & support for payment-related trxn fields

Merge pull request #15561 from eileenmcnaughton/payment_amount

dev/core#1333 Fix incorrect balance amount on fully paid payment

Merge pull request #15558 from eileenmcnaughton/report_page519

(dev/core#1252) Fix paging on contact summary

dev/core#1333 Fix incorrect balance amount on fully paid payment

Per https://lab.civicrm.org/dev/core/issues/1333 this is resulting in an incorrect balance.

The code was previously marked as highly dubious

Attempt to fix paging on contact summary

Merge pull request #15539 from eileenmcnaughton/pay_back

Rename balanceTrxnParams to paymentTrxnParams [REF]

Merge pull request #15545 from eileenmcnaughton/pay_email_p

dev/core#1322 Fix regression whereby Additional Payment Form not setting from when sending email confirmations

Ensure a default FROM address is used when sending email confirmations

Merge pull request #15538 from eileenmcnaughton/ppal_std

Regression fix on Paypal Std with memberships not being finalised correctly.

Rename balanceTrxnParams to paymentTrxnParams [REF]

This array needs some fixes but I wanted to rename the parameter first as balanceTrxnParams is misleading.

The parameters are for the financial_trxn entry corresponding to the payment

Regression fix on Paypal Std with memberships not being finalised correctly.

Per https://github.com/civicrm/civicrm-core/pull/15053#issuecomment-542770130

Merge pull request #15527 from eileenmcnaughton/merge

Fix default mode on Contact.merge api

Merge pull request #15521 from agh1/5.19.0-releasenotes-initial

5.19.0 release notes initial run

Merge branch '5.19' into 5.19.0-releasenotes-initial

Fix default mode on Contact.merge api

I believe this was a change I made in error & only the Contact.get_merge_conflicts api should
receive an array for 'mode'. The mode is part of a loop within that api

Merge pull request #15524 from seamuslee001/5_18_3_release_notes

5 18 3 release notes

Update 5.18.3.md

Add in release notes for 5.18.3