GitLab

Fix LOVD for PHP8

Note, lovd_getVariantInfo() has not been updated as it's currently being
recoded. This would just cause a lot of unnecessary merge conflicts.

Allow passing the classification method to the submission API using the pathogenicity's `@source` value.

The value is compared to our list of known Classification Methods, and
if recognized, then added to the Classification/Method column.

Fix various small issues.

In practise, this disables the status page for LOVD light.

Closes #564.

Fix lovd_checkXSS().

When lovd_checkXSS() is run without arguments, it runs on $_POST by
default. During import, this is not the correct variable to run on. Make
sure it runs on $aData, which resolves to either $_POST or, during
import, to $aLine.

The less-than sign (<) wasn't allowed at all in fields anymore, but they
are in use for age fields and probably other phenotype fields as well.
So relaxed this check for all custom columns back to the previous XSS
check. The newer check for no less-than at all, remains for non-custom
columns.

Fix XSS

Variants attached to multiple Individuals would be removed if one of
these would be deleted. This makes no sense. Corrected this, in a
similar way like how Screenings checks if Variants aren't perhaps
connected to another Screening.

The code was looking for which genes were affected AFTER variants were
removed. This can't possibly work.

Several fixes to the APIs.

Pick the first hg38 variant description output when listing unique
variants. It now picked an entry at random, which could be an entry
without an hg38 description.

$_DB->quote() adds quotes already, so we must remove ours.

Release 3.0-27