summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2012-05-29Bug 754672 - CSRF vulnerability in buglist.cgi allows possible unauthorized ↵Reed Loden2-9/+16
setting of default search options [r=LpSolit a=LpSolit]
2012-05-29Bug 754673 - CSRF vulnerability in query.cgi allows possible unauthorized ↵Reed Loden2-1/+5
use of "Set my default search back to the system default" [r=LpSolit a=LpSolit]
2012-05-29Bug 754561 - Escape HTML in keywords in the auto-complete formReed Loden1-0/+1
[r=LpSolit a=LpSolit]
2012-05-28Bug 756314: Fix dropping of unique matches when the "confirm page" page is ↵Byron Jones1-4/+4
display. r=LpSolit, a=LpSolit
2012-05-28Bug 754981: Add a link pointing to the bug itself in HTML bugmails when only ↵Koosha Khajeh Moogahi1-0/+1
a comment is added r/a=LpSolit
2012-05-24Bug 744691: Throw an error early when calling a method from a non-existent classByron Jones1-0/+1
r=dkl, a=LpSolit
2012-05-21Bug 754090: Bugzilla::FlagType::match() crashes when the group parameter is ↵Frédéric Buclin2-2/+15
not a number a=LpSolit
2012-05-17Bug 752751: Perl modules that start with a protocol (eg HTTP::Header) are ↵Simon Green1-1/+1
not escaped correctly in SAFE_URL_REGEXP r/a=LpSolit
2012-05-07Bug 744338: jobqueue.pl won't work if not called from the bugzilla/ root ↵Håkan Jerning1-1/+7
directory r/a=LpSolit
2012-04-30Bug 749074: Throw an error message instead of syntax error on invalid search ↵Byron Jones2-1/+7
type operators r=LpSolit,a=LpSolit
2012-04-19Bumping the version post-releaseDave Lawrence1-1/+1
2012-04-18Bump version to 4.2.1Dave Lawrence2-3/+3
2012-04-18Bug 745397: (CVE-2012-0466) [SECURITY] The JS template for buglists permits ↵Frédéric Buclin3-57/+0
attackers to access all bugs that the victim can see r=glob a=LpSolit
2012-04-18Bug 728639: (CVE-2012-0465) [SECURITY] User lockout policy can be bypassed ↵Frédéric Buclin3-5/+117
by altering the X-FORWARDED-FOR header r=glob a=LpSolit
2012-04-18Bug 746547: SMALLSERIAL is of type INT2, not INT1Frédéric Buclin1-1/+1
r=timello a=LpSolit
2012-04-17Bug 741078: Update relnotes for 4.2.1Frédéric Buclin1-3/+6
2012-04-17Bug 745197: Add a hook in Bugzilla::Error::_throw_error() so that extensions ↵Frédéric Buclin4-48/+101
can control the way to throw errors r=dkl a=LpSolit
2012-04-17Bug 745320: Shared queries do not work when tags are part of the queryFrédéric Buclin2-7/+12
r=dkl a=LpSolit
2012-04-17Bug 745080: Voting extension causes database deadlocksFrédéric Buclin1-1/+4
r=glob a=LpSolit
2012-04-15Comment toggling text is not localizable because it's in a .js file.Marc Schumann2-5/+3
r/a=LpSolit https://bugzilla.mozilla.org/show_bug.cgi?id=745460
2012-04-14Change columns: empty buttons when images turned off.Marc Schumann6-37/+19
r/a=LpSolit https://bugzilla.mozilla.org/show_bug.cgi?id=474747
2012-04-13Move doc of the admin_editusers_action hook at its right placeFrédéric Buclin1-24/+24
2012-04-12Bug 741078: Release notes for Bugzilla 4.2.1Frédéric Buclin1-2/+47
r=dkl
2012-04-12Bug 737436: Relative dates do not work correctly with the deadline fieldFrédéric Buclin1-5/+11
r=dkl a=LpSolit
2012-04-12Bug 744823 - Deadline throws error when selected in change history field ↵Dave Lawrence1-0/+1
list in query.cgi when not in time tracking group r/a=LpSolit
2012-04-12Fix typoFrédéric Buclin1-1/+1
2012-04-11If you're not allowed to change status or resolution, their values are being ↵Marc Schumann1-15/+24
displayed unlocalized. r/a=LpSolit https://bugzilla.mozilla.org/show_bug.cgi?id=740879
2012-04-11Bug 663377: Quicksearch using "status:" field doesn't work--it is defeated ↵Frédéric Buclin1-42/+30
by the default status selection r=dkl a=LpSolit
2012-04-11Bug 734997: The 'take' link for the assignee field doesn't work when ↵Frédéric Buclin1-7/+22
usemenuforusers is turned on r=glob a=LpSolit
2012-04-10Bug 743991: Need a new hook to update Bugzilla::Search::COLUMN_JOINSrojanu3-1/+67
r/a=LpSolit
2012-04-04Bug 58179: End date not included in the Search By Change History sectionFrédéric Buclin1-0/+5
r=dkl a=LpSolit
2012-03-31Search for start-of-time-interval in date fields is (partially?) broken.Marc Schumann1-1/+1
r/a=LpSolit https://bugzilla.mozilla.org/show_bug.cgi?id=715270
2012-03-30Fix bustage: Perl 5.8.x doesn't understand \g1 in regexp (must use \1 instead)Frédéric Buclin1-1/+1
2012-03-29Bug 554819: Quicksearch should be using Text::ParseWords instead of custom ↵Frédéric Buclin4-103/+191
code in splitString Also fixes QS with accented characters (bug 730207) r=dkl a=LpSolit
2012-03-28Bug 735821: Fix broken HTML code in bugmail.html.tmpl.Tiago Mello1-1/+1
r/a=LpSolit
2012-03-28Bug 730984: A single whitespace in the Status Whiteboard field generates an ↵Frédéric Buclin1-1/+5
invalid SQL query r=dkl a=LpSolit
2012-03-26Bug 734471 - Need new hook edituser search templateFrancisco Donalisio1-0/+3
r=timello, a=LpSolit
2012-03-26Add hooks for alternative login methods. r,a=LpSolit.Gervase Markham2-0/+5
https://bugzilla.mozilla.org/show_bug.cgi?id=698418
2012-03-22Bug 733458: The "creator" argument is listed twice for the Bug.search ↵Matt Selsky1-7/+3
WebService method r/a=LpSolit
2012-03-17Fix bustage: Bugzilla -> terms.BugzillaFrédéric Buclin1-3/+3
https://bugzilla.mozilla.org/show_bug.cgi?id=736057
2012-03-17Bug 736057: Add to the release notes that |FILTER url_quote| has been ↵Frédéric Buclin1-0/+3
replaced by |FILTER uri| r=dkl a=LpSolit
2012-03-10Tabular reports' column headers do not use display_value.Marc Schumann1-1/+1
r/a=LpSolit https://bugzilla.mozilla.org/show_bug.cgi?id=734413
2012-03-10Bug 730032: The documentation must mention bzr instead of cvs in the ↵Frédéric Buclin1-56/+78
"Upgrading to New Releases" section r=dkl a=LpSolit
2012-03-10Bug 731163: Search.pm can use undefined alias in ORDER BY clauseFrédéric Buclin1-1/+1
r=dkl a=LpSolit
2012-03-09Fixed comma in documentationDave Lawrence1-1/+1
2012-03-09Bug 730794 - Need new hook edituser pageFrancisco Donalisio3-0/+41
r=dkl, a=LpSolit
2012-03-06Fix bustageFrédéric Buclin1-1/+0
2012-03-06Bug 545610: Correctly parse CGI parameters, especially when using mod_perlFrédéric Buclin2-14/+22
r=gerv a=LpSolit
2012-03-06Bug 731323: Wrong URLs in the "Total" row at the bottom of tabular reports ↵Frédéric Buclin1-0/+8
when JS is enabled and a user field is used for the vertical axis r=gerv a=LpSolit
2012-03-03Bug 731586: Email notifications about status changes in blockers are ↵Frédéric Buclin2-11/+7
incorrectly formatted r=dkl a=LpSolit