summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2015-08-24Bug 1196092 - Switch logincookies primary key to auto_incremented id, make ↵Dylan William Hardison2-3/+10
cookie a secondary UNIQUE key
2015-08-24Bug 1196614 - restrict the ability for users with editusers/creategroups to ↵Byron Jones3-1/+56
alter admins and the admin group
2015-08-21Bug 1197084 - No mail sent when bugs added to or removed from ↵Byron Jones1-1/+13
*-core-security groups
2015-08-21Bug 1195645 - don't create a new session for every authenticated REST/BzAPI callByron Jones2-2/+12
2015-08-20Bug 1190476 - set Comment field in GPG email to the URL of the bugByron Jones1-17/+29
2015-08-28Bug 1195362: Quicksearch error pages ("foo is not a field" and friends) ↵David Lawrence1-7/+13
should still fill in search into quicksearch box
2015-08-19Bug 1195544 - Information Disclosure Vulnerability Permits Attacker Obtains ↵Byron Jones1-0/+2
The GitHub OAUTH Return Code
2015-08-18Bug 1194584 - fix 'member of secure mail group' is always falseByron Jones1-1/+1
2015-08-18Bug 1194250 - 'take' button should uncheck "reset assignee to default"Byron Jones1-0/+3
2015-08-18Bug 1195620 - stop sending http cookies to sentryByron Jones1-3/+36
2015-08-18Bug 1195598 - The "unknown_action" error message could confuse the userFrédéric Buclin1-2/+3
2015-08-18Bug 1195593 - Able to delete any Bugzilla user's Bugmail FilterByron Jones1-4/+5
2015-08-17Bug 1195315 - Use of uninitialized value in string eq at Bugzilla/Product.pm ↵Byron Jones1-0/+1
line 99
2015-08-17Bug 981487 - change bugs_fulltext from myisam to innodbByron Jones3-13/+7
2015-08-17Bug 979441 - Under mod_perl, some modules aren't preloaded at startupByron Jones2-35/+40
2015-08-17Bug 1193190 - 'view account history' on edituser should include audit_log ↵Byron Jones2-14/+54
entries
2015-08-14Bug 1181596 - Modal UI doesn't honor the "where to put the additional ↵Byron Jones3-32/+64
comment textarea" preference
2015-08-14Bug 1194584 - "has cert" and "member of secure group" shouldn't be visible ↵Byron Jones1-9/+13
when creating a user
2015-08-13Bug 1192688 - non-schema changesByron Jones2-3/+8
2015-08-13Bug 1192688 - backout non-schema changesByron Jones2-8/+3
2015-08-12Bug 1193878 - Make a few more fields optional on the intern request formDylan William Hardison2-4/+8
2015-08-12Bug 1192854: change tabs on user preferences from horizontal to vertical layoutDavid Lawrence3-1/+77
2015-08-12Bug 1036872 - Bugmail filtering allows through bugmail that should be ↵Byron Jones1-1/+33
blocked when combined with the standard email prefs
2015-08-12Bug 1193590 - Warning about obsolete patches on an unassigned bugByron Jones3-4/+5
2015-08-11Bug 1190029: Would like a way to see which groups are 'secure' groups in ↵David Lawrence2-0/+48
editusers.cgi when diagnosing password reset issues
2015-08-11Bug 1192688 - add ip to last used api key informationDylan William Hardison4-3/+12
2015-08-11Bug 1184332 - Add Restricted API calls for MozReviewDylan William Hardison8-22/+137
2015-08-11Bug 1190693 - Backport bug 1175643 to bmo for safer auth delegationDylan William Hardison2-4/+40
2015-08-11Bug 1160929 - add support for storing attachments in s3Byron Jones11-46/+1205
2015-08-11Bug 1191888 - fix duplicate IDsByron Jones1-4/+4
2015-08-11Bug 1153108 - bump non-guided bug form default up from canconfirm to editbugsByron Jones1-1/+1
2015-08-11Bug 1187220 - develop a script to remove non-public data from the bmo databaseByron Jones1-0/+243
2015-08-10Bug 1192893 - Deactivated keywords cause the table on the keyword ↵Byron Jones1-18/+10
descriptions page to render strangely
2015-08-10Bug 1146761 - clicking on a date/flag/etc should scroll to the corresponding ↵Byron Jones6-50/+163
change
2015-08-10Bug 1153108 - add page allowing users to grant canconfirm rights onto themselvesByron Jones3-0/+92
2015-08-10Bug 1167622 - red border in confirmation of changes is misleading - should ↵Simon Green1-2/+2
be green as the text
2015-08-07Bug 1191016: Additional changes needed to the Intern Request FormDavid Lawrence2-29/+32
2015-08-07Bug 1191888: Create security_remove.pl script to remove user from all ↵David Lawrence1-0/+189
visibility roles in secure bugs
2015-08-06Bug 1191565 - [Security] Able to delete any Bugzilla user's component watchingDavid Lawrence2-3/+16
2015-08-04Bug 1190601: Should be able to edit comments made from editing a current ↵David Lawrence1-3/+6
attachment
2015-08-04Bug 1190836: Add user-agent detection of Windows 10David Lawrence1-0/+1
2015-08-04Bug 1188339 - Backport upstream bug 1179856 (Increase length of all tokens ↵Dylan William Hardison1-1/+6
value for greater security)
2015-08-03Bug 1190255 - modal UI is used immediately after bug creation, even if ↵Byron Jones3-7/+11
preferenced off
2015-08-01Bug 1189362 - Fix memory leak in Bugzilla::Bug->commentsDylan William Hardison1-1/+2
2015-07-30Bug 1188561: Pre-populate form.fxos.feature fields with GET parametersDavid Lawrence2-8/+25
2015-07-31Bug 1189172 - remove link to 'release notes' from index page, and point ↵Byron Jones7-118/+15
'help' to rtd
2015-07-31Bug 1185856 - Tabbing out of the keyword field should not select the first ↵Byron Jones2-2/+2
available keyword
2015-07-30Bug 1188339 - Backport upstream bug 1179856 (Increase length of all tokens ↵Dylan William Hardison2-6/+8
value for greater security)
2015-07-30Bug 1189075 - keyboard shortcut for going into edit mode conflicts with ↵Byron Jones1-0/+2
Firefox's tab groups feature
2015-07-29Bug 1188374 - account disabling lacks csrf protectionByron Jones2-4/+3