summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2012-10-12s/sortey/sortkey/gFrédéric Buclin1-2/+2
2012-10-12Bug 790129: Bugzilla->fields returns fields in random order (the sortkey is ↵Simon Green1-2/+3
ignored) r/a=LpSolit
2012-10-12Bug 793826: Prevent private web service methods from being calledKoosha Khajeh Moogahi1-1/+3
r=dkl a=LpSolit
2012-10-11Bug 798994: Fix incorrect double escaping when displaying saved queries URLsSimon Green1-1/+1
r=glob, a=LpSolit
2012-10-09Bug 753635: Allow editing local see also even if you cannot edit the other bugSimon Green1-3/+7
r=glob, a=LpSolit
2012-10-08Bug 652047: checksetup.pl fails to compile/run if the Voting extension is ↵Frédéric Buclin2-1/+33
enabled on a fresh install r=glob a=LpSolit
2012-10-04Bug 790909: Editing dependencies from the "Change Several Bugs at Once" page ↵Frédéric Buclin1-1/+1
does not work as expected (bug IDs are incorrectly parsed) r=dkl a=LpSolit
2012-10-04Bug 788098: Queries involving group substitution crash when ↵Frédéric Buclin2-6/+14
usevisibilitygroups is enabled r=dkl a=LpSolit
2012-10-04Bug 794389: There is no field named 'actual_time' when generating reportsFrédéric Buclin1-0/+4
r=glob a=LpSolit
2012-10-03Bug 757935: Bugs with resolution MOVED cannot be editedFrédéric Buclin1-1/+3
r=glob a=LpSolit
2012-09-29Bug 793893: Tabular reports crash when no format parameter is definedFrédéric Buclin3-7/+5
r=glob a=LpSolit
2012-09-17Bug 761046: Don't redirect when hitting buglist.cgi directly to avoid ↵Byron Jones1-1/+0
duplicate cgi->header calls r=LpSolit, a=LpSolit
2012-09-14Update POD to fix bustage in Perl 5.16.1Frédéric Buclin2-0/+7
r=runtests.pl
2012-09-13Bug 680771 - Send X-XSS-Protection header for XSS prevention/blockingReed Loden1-0/+4
[r=mkanat a=LpSolit]
2012-09-11Bug 790215 - Flag names are not properly escaped when displayed on confirm ↵Reed Loden2-2/+1
user match page [r=LpSolit a=LpSolit]
2012-09-09Bug 671612: Send "X-Content-Type-Options: nosniff" with every responseMatt Selsky3-4/+5
r/a=LpSolit
2012-09-03Bug 786889: Add missing 'Summary (first 60 chars)' header to CSV outputMatt Tyson1-0/+1
r=glob, a=LpSolit
2012-08-30Bumped version post-releaseDave Lawrence1-1/+1
2012-08-30Bump version to 4.2.3Dave Lawrence2-3/+3
2012-08-30Bug 785470: (CVE-2012-3981) [SECURITY] Missing escaping of the username can ↵Reed Loden1-0/+2
lead to LDAP injection r/a=LpSolit
2012-08-30Bug 785522: [SECURITY] Block access to templates in extensions/Frédéric Buclin1-1/+1
r=glob a=LpSolit
2012-08-30Bug 731156: [Oracle] Adding or removing a DB column does not handle SERIAL ↵Frédéric Buclin2-29/+97
correctly r=dkl a=LpSolit
2012-08-30Bug 786351: Release notes for Bugzilla 4.2.3Frédéric Buclin1-0/+41
r=dkl a=LpSolit
2012-08-29Bug 772620: Ignore empty strings in the CC listFrédéric Buclin1-0/+2
r=dkl a=LpSolit
2012-08-29Bug 786310: Remove tokens when saving the default queryByron Jones1-0/+2
r= LpSolit, a=LpSolit
2012-08-29Fix more bustage caused by Bug 772953Byron Jones1-4/+6
2012-08-29Fix bustage caused by Bug 772953Byron Jones1-1/+4
2012-08-28Bug 772953: Remove the token from buglist urlsByron Jones4-3/+24
r=dkl, a=LpSolit
2012-08-27Bug 785917: Custom field descriptions are not properly escaped when ↵Frédéric Buclin2-2/+1
displayed as bug list column headers r=glob a=LpSolit
2012-08-26Bug 559539: [Oracle] whine.pl sets run_next incorrectly due to CURRENT_DATEDavid Taylor1-3/+5
r/a=LpSolit
2012-08-21Bug 783786: PostgreSQL databases can be created with the wrong encodingFrédéric Buclin1-0/+10
r=dkl a=LpSolit
2012-08-20Bug 698068: The "There is no saved search named ..." page has a "forget" linkFrédéric Buclin3-3/+3
r=glob a=LpSolit
2012-08-15Bug 771100: Unable to attach a file to a bug with perl 5.16Frédéric Buclin1-1/+1
r=dkl a=LpSolit
2012-08-12Bug 781059 part 2: -moz-border-radius is obsolete and must be replaced by ↵Frédéric Buclin1-1/+1
the standard border-radius CSS property
2012-08-08Bug 781059: -moz-border-radius is obsolete and must be replaced by the ↵Frédéric Buclin2-10/+10
standard border-radius CSS property r=reed a=LpSolit
2012-08-07Bug 780883 - s/fieldAutoComp/keywordAutoComp/ (fallout from bad 4.2 commit ↵Reed Loden1-1/+1
in bug 764517) [r=glob a=LpSolit]
2012-08-07Bug 779709: Don't allow searching on changes to private attachments or commentsSImon Green1-3/+36
r=glob, a=LpSolit
2012-08-06Bug 706271: CSRF vulnerability in token.cgi allows possible unauthorized ↵Frédéric Buclin3-3/+10
password reset e-mail request r=reed a=LpSolit
2012-08-03Bug 682317 - Bug.create is incorrectly documented as ignoring invalid ↵Koosha Khajeh Moogahi1-2/+3
fields; it should say it produces an error r=dkl, a=LpSolit
2012-08-03Bug 780028: Oracle crashes if a column listed in ORDER BY appears twice in ↵Frédéric Buclin1-4/+13
SELECT r=glob a=LpSolit
2012-07-30Bug 778226 - Add Mac OS 10.8 Mountain Lion detectionMatt Selsky1-0/+1
r=timeless, a=LpSolit
2012-07-27Bumped version post releaseDave Lawrence1-1/+1
2012-07-26Bump version to 4.2.2Dave Lawrence2-3/+3
2012-07-26Bug 777398: (CVE-2012-1968) [SECURITY] HTML bugmail exposes information ↵Frédéric Buclin3-24/+35
about restricted bugs r=glob a=LpSolit
2012-07-26Bug 774625 - describecomponents.cgi - product category listing is not sortedMarkus Kolb1-1/+1
r=dkl, a=LpSolit
2012-07-26Bug 777555: Release notes for Bugzilla 4.2.2Frédéric Buclin1-0/+42
r=dkl a=LpSolit
2012-07-26Backout bug 768573 to fix bustageFrédéric Buclin4-6/+6
2012-07-25Bug 776103 - Syntax error in Bugzilla::User::Setting API docKoosha Khajeh Moogahi1-2/+2
r/a=LpSolit
2012-07-24Bug 753688: Classification doesn't work as z-axis on reportsFrédéric Buclin1-4/+14
r=glob a=LpSolit
2012-07-24Bug 764517: Don't automatically select the first keyword if the search ↵Byron Jones1-0/+3
string is empty r=dkl, a=LpSolit