summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2004-12-03Patch for bug 271306: specify that defaultquery is used by default to submit ↵jocuri%softhome.net1-2/+2
queries, not bugs; patch by Frédéric Buclin <LpSolit@netscape.net>, r=vladd, r=justdave, a=justdave.
2004-12-02Reinstate the seperate security section as a chapter.jake%bugzilla.org4-273/+464
2004-11-29s/FEL/filterexceptions.pl -- fix this confusing error message once and forkiko%async.com.br1-1/+1
all. r=ssdbot
2004-11-25Documentation patch: fix burning documentation tree caused by the checkin to ↵jocuri%softhome.net1-2/+2
bug 245075.
2004-11-25Documentation patch: fix burning documentation tree caused by the checkin to ↵jocuri%softhome.net1-2/+4
bug 245075.
2004-11-25Documentation patch for bug 240060: document minimum sendmail version that ↵jocuri%softhome.net1-2/+9
is required for Bugzilla to work; patch by Shane H. W. Travis <travis@sedsystems.ca>; r=vladd.
2004-11-25Documentation patch for bug 24496: Forbid resolving fixed when there're ↵jocuri%softhome.net1-0/+14
unresolved dependencies; patch by Andreas Höfler <andreas.hoefler@bearingpoint.com>, r=travis.
2004-11-25Documentation patch related to bug 245075: Fix excessive capitalization by ↵jocuri%softhome.net1-3/+3
using the <emphasis> tag.
2004-11-25Documentation patch for bug 245075: Document command-line script to send ↵jocuri%softhome.net1-38/+91
unsent bugmail; patch by Shane H. W. Travis <travis@sedsystems.ca>, r=vladd.
2004-11-24Documentation patch for bug 262320: Provide documentation for ↵jocuri%softhome.net1-1/+12
list/tables.html.tmpl; patch by Shane H. W. Travis <travis@sedsystems.ca>, r=vladd.
2004-11-24Patch for bug 180879: Implement privs for bug flags modification; patch by ↵jocuri%softhome.net8-9/+154
Frédéric Buclin <LpSolit@netscape.net>, r=joel, a=justdave.
2004-11-24Patch for bug 269294: Do not mention QuickSearch in the error message if not ↵jocuri%softhome.net1-7/+7
in use; patch by Frédéric Buclin <LpSolit@netscape.net>, r=vladd, a=justdave.
2004-11-20Patch for bug 264868: show_bug.cgi should honour 'emailsuffix' in 'Reassign ↵jocuri%softhome.net3-5/+5
bug to' field; patch by Marc Schumann <wurblzap@gmail.com>, r=vladd, a=justdave.
2004-11-20Patch for bug 270404: Add detaint_natural and fix use lib instruction in ↵jocuri%softhome.net1-3/+5
sendbugemail.pl to make it functional; patch by Nick.Barnes@pobox.com, r=justdave, a=justdave.
2004-11-20Patch for bug 267560: CheckCanChangeField in process_bug.cgi shouldn't ↵jocuri%softhome.net1-0/+1
request the bug owner, QA contact and reporter too many times; patch by Frédéric Buclin <LpSolit@netscape.net>, r=justdave, a=justdave.
2004-11-20Patch for bug 267494: 'Voter' column should not appear in email preferences ↵jocuri%softhome.net1-4/+9
if param(usevotes) is false; patch by Shane H. W. Travis <travis@sedsystems.ca>, r=vladd, a=justdave.
2004-11-20Patch for bug 177993: Point out that the mid-air collision message is ↵jocuri%softhome.net1-0/+13
customizable; patch by Shane H. W. Travis <travis@sedsystems.ca>, r=vladd.
2004-11-13Patch for bug 269274: Make 'Give me some help' link work on advanced query ↵jocuri%softhome.net1-1/+1
page with cookies disabled; patch by Greg Hendricks <ghendricks@novell.com>, r=vladd, a=justdave.
2004-11-12Patch for bug 245807: rewrite description for WORKSFORME; patch by Shane H. ↵jocuri%softhome.net1-74/+116
W. Travis <travis@sedsystems.ca>, r=vladd, a=justdave.
2004-11-11Backing out patch for bug 267494 since it brokes the tinderbox builds.jocuri%softhome.net1-9/+4
2004-11-11Patch for bug 267494 - If param(usevotes) not true, hide 'Voter' column in ↵jocuri%softhome.net1-4/+9
email preferences; patch by Shane H. W. Travis <travis@sedsystems.ca>, r=vladd, a=justdave.
2004-11-11Documentation patch for bug 268613 - Update paragraph related to email prefs ↵jocuri%softhome.net2-36/+160
tab; patch by Shane H. W. Travis <travis@sedsystems.ca>, r=vladd.
2004-11-09Fix for bug 251068: cssification of index.cgi; Patch by Vitaly Harisov; ↵myk%mozilla.org3-25/+96
r=myk,kiko; a=myk for 2.20
2004-11-08Bug 257344: Remove exit from error handlers when non-interactivebugreport%peshkin.net2-5/+30
r=glob,justdave a=justdave
2004-11-08Fixing documentation tree build which was broken by commiting the patch on ↵jocuri%softhome.net1-2/+2
bug 266461.
2004-11-08Documentation patch: clean-up identation after commiting patch for bug ↵jocuri%softhome.net1-121/+123
198020: Bugzilla Guide contains no admin docs for flags.
2004-11-08Fixing documentation tree build which was broken by commiting the patch on ↵jocuri%softhome.net1-2/+4
bug 266461.
2004-11-08Documentation patch for bug 266461: Document minimum requirements for ↵jocuri%softhome.net1-1/+5
ft_min_word_len MySQL parameter; patch by Shane H. W. Travis <travis@sedsystems.ca> modified by me.
2004-11-05Fixing documentation build tree, broken by the check in of bug 198020; ↵jocuri%softhome.net1-1/+1
rename the name of the `flags` section so it doesn't collide with already existing section.
2004-11-05Patch for bug 262182: editing a buglist from a tabular report shouldn't go ↵jocuri%softhome.net1-1/+1
to a wrong page; patch by Gervase Markham <gerv@mozilla.org>; r=rsiklos, a=justdave.
2004-11-05Documentation patch for bug 198020: provide admin docs for flags; patch by ↵jocuri%softhome.net1-0/+411
Shane H. W. Travis <travis@sedsystems.ca>; r=myk.
2004-11-05Patch for bug 267774: Remove unused variable in process_bug.cgi; patch by ↵jocuri%softhome.net1-1/+0
Frédéric Buclin <LpSolit@netscape.net>; r=kiko, a=justdave.
2004-11-05Patch for bug 267543: Checksetup.pl should contain proper spacing in ↵jocuri%softhome.net1-1/+1
my$sth... statement; r=justdave, a=justdave.
2004-11-05Patch for bug 266955: Only display interdiff options if we have ↵jocuri%softhome.net1-1/+1
other_patches; patch by Christian Reis <kiko@async.com.br>; r=myk, a=myk.
2004-11-04Documentation patch for bug 257692: link directly to the final URL for the ↵jocuri%softhome.net1-1/+1
developer's guide; patch by Shane H. W. Travis <travis@sedsystems.ca>; r=vladd.
2004-11-04Documentation patch for bug 247441: rephrase section 3.9 regarding access ↵jocuri%softhome.net1-0/+10
control on secure bugs; patch by Shane H. W. Travis <travis@sedsystems.ca>; r=vladd.
2004-11-03Patch for bug 266142: Make bug listing display optimal for viewing; patch by ↵jocuri%softhome.net1-1/+1
Steve Wardell <okapi@codeboy.net>, r=kiko, a=myk.
2004-11-03Patch for bug 265679: requests error complaining about lack of group ↵jocuri%softhome.net1-3/+3
membership should not contain wrong spelled &bnsp; patch by Frédéric Buclin <LpSolit@netscape.net>; r=vladd, a=justdave.
2004-11-03Patch for bug 212017: Should be able to change a bug if it has a flag ↵jocuri%softhome.net2-2/+4
requested that is no longer requestable; patch by Frédéric Buclin <LpSolit@netscape.net>; r=myk, vladd, a=myk.
2004-11-03Patch for bug 251596: make show.html template use customized body attribute; ↵jocuri%softhome.net2-8/+11
patch by Marc Schumann <wurblzap@gmail.com>; r=kiko, a=justdave.
2004-11-03Patch for bug 258355: remove 1x1.gif and use CSS instead in order to create ↵jocuri%softhome.net3-1/+2
suitable spacing; patch by Frédéric Buclin <LpSolit@netscape.net>; r=kiko, a=justdave.
2004-11-03Patch for bug 265011: Add missing <td> and </td> tags in query.cgi; patch by ↵jocuri%softhome.net1-6/+7
Frédéric Buclin <LpSolit@netscape.net>; r=kiko, a=justdave.
2004-10-31Comment-only fix: be honest about where we put that string! r=ssdbotkiko%async.com.br1-1/+1
2004-10-25Bump version number to 2.19.1+ to indicate version pulled from CVS.justdave%bugzilla.org1-1/+1
2004-10-25Bump version number to 2.19.1 for snapshot releasejustdave%bugzilla.org2-3/+3
2004-10-25[SECURITY] Bug 250605: Changes to the metadata (filename, description, mime ↵justdave%bugzilla.org1-0/+10
type, review flags) on attachments which were flagged as private get displayed to users who are not members of the group allowed to see private attachments when receiving bug change notification mails. This only affects sites that use the 'insidergroup' feature. Patch by Joel Peshkin <bugreport@peshkin.net> r=kiko,justdave, a=justdave
2004-10-25[SECURITY] Bug 253544: Changes to the metadata (filename, description, mime ↵justdave%bugzilla.org1-3/+9
type, review flags) on attachments which were flagged as private get displayed to users who are not members of the group allowed to see private attachments when viewing the bug activity log. This only affects sites that use the 'insidergroup' feature. Patch by Joel Peshkin <bugreport@peshkin.net> r=zach,justdave, a=justdave
2004-10-25[SECURITY] Bug 263780: Exporting a bug to XML exposes user comments and ↵justdave%bugzilla.org2-0/+6
attachment summaries which are marked as private to users who are not members of the group allowed to see private comments and attachments. XML export is not exposed in the user interface, but is available to anyone who knows the correct URL to invoke it. This only affects sites that use the 'insidergroup' feature. Patch by Joel Peshkin <bugreport@peshkin.net> r=vladd,justdave, a=justdave
2004-10-25[SECURITY] Bug 252638: It is possible to send a carefully crafted HTTP POST ↵justdave%bugzilla.org1-1/+21
message to process_bug.cgi which will remove keywords from a bug even if you don't have permissions to edit all bug fields (the "editbugs" permission). Such changes are reported in "bug changed" email notifications, so they are easily detected and reversed if someone abuses it. Patch by Myk Melez <myk@mozilla.org> r=gerv, a=justdave
2004-10-25Bug 250897: Enforce a 10 minute waiting period between password reset ↵justdave%bugzilla.org2-4/+17
attempts to prevent the user getting mailbombed if the form is submitted multiple times. Patch by Joel Peshkin <bugreport@peshkin.net> r=kiko, a=justdave