summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2013-10-30remove inclusion of missing file in requestnaggerByron Jones1-9/+0
2013-10-30Bug 927778: users without canconfirm cannot set needinfo, and can clear ↵Byron Jones3-24/+50
needinfo requests which aren't targeted at them
2013-10-30enable requestnagger, disable requestwhinerByron Jones1-0/+0
2013-10-30Bug 892615: update requestnagging to suport securemailByron Jones5-7/+72
2013-10-29Bug 931232 - form:itrequest has wrong product/component for 'Any other ↵Dave Lawrence1-14/+22
issue' option
2013-10-29Bug 927497 - "Add me to CC list" feature of bug creation screen gives token ↵Dave Lawrence1-10/+18
error
2013-10-29Bug 900699 - Change dogfoodtriage component to betatriageDave Lawrence2-2/+2
2013-10-29re-enable requestwhiner, disable requestnagger, restore request-nagger scriptByron Jones2-0/+183
2013-10-29Fix typo in filenameByron Jones1-183/+0
2013-10-29Bug 892615: Add a 24 hour nag to all requests (review, feedback and ↵Byron Jones25-2/+1367
need-info) and make them follow-able
2013-10-29Bug 892615: Add a 24 hour nag to all requests (review, feedback and ↵Byron Jones2-0/+108
need-info) and make them follow-able (schema-only)
2013-10-28Bug 931192: Add support for product aliases to searchByron Jones1-1/+51
2013-10-28Bug 928410 - Bug.get should return detail about cc list members similar to ↵Dave Lawrence1-0/+6
assigned_to, creator and qa_contact
2013-10-25Bug 921523 - backport upstream bug 917669 to bmo/4.2 to throw error when ↵Dave Lawrence4-11/+23
invalid cookies/tokens are used with webservices
2013-10-25Bug 930407: background bugmail generation throws a "Can't store CODE items" ↵Byron Jones1-9/+15
error on some changes
2013-10-24disable changes from bug 910565Byron Jones1-5/+8
2013-10-24Bug 930013: fall back to the bug's current delta_ts when validating a token ↵Byron Jones1-1/+1
if one is not provided to process_bug.cgi
2013-10-24Bug 930366: detection of github PRs not working with trailing '/' in urlsByron Jones2-2/+2
2013-10-23Bug 930117 - IT request page is brokenDave Lawrence2-11/+12
2013-10-23Bug 924144: Add account creation date to user profileByron Jones3-0/+199
2013-10-23Bug 895687: add UserStory extensionByron Jones12-2/+243
2013-10-22Bug 928387: InlineHistory "marked as a duplicate" detection too eagerByron Jones1-12/+9
2013-10-22Bug 913075 - Change the Bugzilla Product Name of BootToGecko to Firefox OSDave Lawrence6-12/+10
r=glob
2013-10-21Bug 910565: backport bug 877078 to bmo (shift bugmail generation to the ↵Byron Jones6-67/+200
jobqueue)
2013-10-21fix breakage caused by bug 922684Byron Jones1-1/+8
2013-10-21Bug 928092: Add OS detection for Windows 8.1Frédéric Buclin1-1/+2
2013-10-18Bug 924572 - Backport upstream bugs 741722, 838846 to bmo/4.2 for flag_type ↵Dave Lawrence2-1/+114
REST API support
2013-10-18Bug 922684 - backport upstream bug 919852 to bmo/4.2 to allow quicksearch ↵Dave Lawrence2-38/+55
style bug searching in the webservice API
2013-10-18Bug 925780 - backport upstream bug 916254 to bmo/4.2 to extend Bug.get to ↵Dave Lawrence1-0/+57
return user details
2013-10-18Bug 926109: fix 'too many joins' fixByron Jones1-17/+17
2013-10-18adjust version to 4.2.7+Byron Jones1-1/+1
2013-10-17Bug 912661 - backport upstream bug 911593 to bmo/4.2 for csrf security fix ↵Dave Lawrence1-3/+2
in process_bug.cgi r=glob
2013-10-17Revert for now Bug 887117 - Move the compiled template cache dir to a ↵Dave Lawrence3-3/+1
directory in the document root to avoid storing on NFS
2013-10-17Bug 887117 - Move the compiled template cache dir to a directory in the ↵Dave Lawrence3-1/+3
document root to avoid storing on NFS r=glob
2013-10-17merged with bugzilla/4.2Dave Lawrence11-41/+98
2013-10-17Bug 927736: "invalid token" error if someone else changes the CC list while ↵Byron Jones1-11/+11
viewing a bug
2013-10-17add missing input imageByron Jones1-0/+0
2013-10-17Bug 927741: whines are throwing sql errors on stage (Unknown column ↵Byron Jones1-10/+1
'map_product.classification_id')
2013-10-17Bug 927570: mid-air conflict fails to check all changed fieldsByron Jones1-2/+4
2013-10-16Bump version to 4.2.7Dave Lawrence2-3/+3
2013-10-16Bug 924932: (CVE-2013-1743) [SECURITY] Field values are (still) not escaped ↵Frédéric Buclin1-14/+24
correctly in tabular reports r=dkl a=glob
2013-10-16Bug 924802: (CVE-2013-1742) [SECURITY] (XSS) "id" and "sortkey" are not ↵Frédéric Buclin2-5/+3
sanitized when editing flag types if categoryAction-foo is set r=dkl a=glob
2013-10-16Bug 913904: (CVE-2013-1734) [SECURITY] CSRF when updating attachmentsFrédéric Buclin1-8/+11
r=dkl a=sgreen
2013-10-16Bug 906745 - In MySQL, tokens are not case-sensitive, reducing total entropy ↵Dave Lawrence1-1/+1
and allowing easier brute force r=LpSolit,a=sgreen
2013-10-16Bug 907438 - In MySQL, login cookie checking is not case-sensitive, reducing ↵Dave Lawrence1-3/+3
total entropy and allowing easier brute force r=LpSolit,a=sgreen
2013-10-16Bug 906745 - In MySQL, tokens are not case-sensitive, reducing total entropy ↵Dave Lawrence3-8/+24
and allowing easier brute force r=LpSolit,a=glob
2013-10-16Bug 926109: Error when searching for many columns at once (MariaDB can only ↵Byron Jones4-12/+83
use 61 tables in a join)
2013-10-16Bug 927039: Typo in mozilla skin's global.cssByron Jones1-1/+0
2013-10-16Bug 926641: Release tracking report broken since 12-Oct BMO maintenanceDave Lawrence1-6/+11
2013-10-16Bug 927026: searching for an unset tracking flag is failing againByron Jones2-22/+0