summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2012-11-13Bug 790296 (CVE-2012-4189): [SECURITY] Field values are not escaped ↵Frédéric Buclin2-2/+2
correctly in tabular reports r=dkl a=LpSolit
2012-11-13Bug 808845 (CVE-2012-5475): [SECURITY] Security vulnerability in YUI's ↵Frédéric Buclin1-0/+0
swfstore.swf in YUI 2.8.2 and 2.9.0 a=LpSolit
2012-11-13Bug 781850 (CVE-2012-4198): [SECURITY] Do not leak the existence of groups ↵Frédéric Buclin2-11/+26
when using User.get() r=dkl a=LpSolit
2012-11-13Bug 802204 (CVE-2012-4197): [SECURITY] Marking an attachment you cannot see ↵Frédéric Buclin1-3/+0
as obsolete can disclose its description r=gerv a=LpSolit
2012-11-13Bug 731178 (CVE-2012-4199): [SECURITY] field-events.js.tmpl discloses ↵Frédéric Buclin2-8/+21
product and component names that the user is not allowed to see r=dkl a=LpSolit
2012-11-13Bug 615627: Make t/012throwables.t know about user errors defined in extensionsSimon Green3-3/+20
r=dkl, a=LpSolit
2012-11-13But 800196: Sanitise line-endings for textarea fieldsMatt Tyson1-0/+16
r=glob, a=LpSolit https://bugzilla.mozilla.org/show_bug.cgi?id=800196
2012-11-12Bug 676844: Replace ThrowCodeError() by ThrowUserError() when the error is ↵Frédéric Buclin18-130/+105
not triggered by the code itself r=glob a=LpSolit
2012-11-08Fix the indentationFrédéric Buclin1-1/+1
2012-11-08Bug 808300: Requesting data for your own account using User.get should also ↵Koosha Khajeh Moogahi1-4/+13
returns groups you belong to r/a=LpSolit
2012-11-08Bug 805645: Release notes for Bugzilla 4.4rc1Frédéric Buclin1-12/+687
r=dkl
2012-11-05Bug 803310: Bump the minimum requirement for Email::Send to enable the Test modeFrédéric Buclin1-1/+2
r=glob a=LpSolit
2012-11-04Bug 741722: Product.get should include flag_types informationFrank Becker1-3/+108
r=dkl a=LpSolit
2012-11-04Make POD added in bug 737850 a bit clearerFrédéric Buclin1-3/+3
2012-11-03Bug 804505: Oracle crashes when typing "word1 word2" in QuickSearch with ↵Frédéric Buclin3-8/+8
"ORA-29907: found duplicate labels in primary invocations" r=dkl a=LpSolit
2012-11-02Bug 806012: Installation docs need to be updated with instructions for bzrFrédéric Buclin2-6/+6
r=dkl a=LpSolit
2012-11-02Fix typoFrédéric Buclin1-1/+1
2012-11-02Bug 807937: Fix PODKoosha Khajeh Moogahi1-6/+7
r/a=LpSolit
2012-10-30Bug 286374 - Platform and OS lose their hyperlinks (in create) when viewingSunil Joshi1-14/+18
r=dkl, a=LpSolit
2012-10-30Bug 806714: Bugzilla.parameters should return usemenuforusers for all ↵Frédéric Buclin1-0/+2
logged-in users r=gerv a=LpSolit
2012-10-29Bug 800964: Unknown dot(.) is present instead of 'T' in console while ↵Frédéric Buclin1-1/+2
running testserver.pl on Windows r=wurblzap a=LpSolit
2012-10-27Add WS::Classification to the list of available modules, see bug 694755Koosha Khajeh Moogahi1-1/+3
r=LpSolit
2012-10-25Bug 772359: LogActivityEntry shouldn't remove any characters from the field ↵Byron Jones2-8/+35
when splitting long lines; and delimiters need to be inserted when joining split entries r=LpSolit, a=LpSolit
2012-10-25Bug 610767: contrib/convert-workflow.pl should add transitions from RESOLVED ↵Frédéric Buclin1-3/+46
and VERIFIED to CONFIRMED (if transitions to REOPENED were present) r=dkl a=LpSolit
2012-10-25Bug 800509 - Add an X-Bugzilla-Resolution header in bugmailDave Lawrence1-0/+1
r/a=LpSolit
2012-10-25Bug 802586 - config.js.tmpl doesn't display keywords correctly anymoreDave Lawrence1-2/+9
r/a=LpSolit
2012-10-19Bug 803600: Clean up the comment generated when deleting attachmentsFrédéric Buclin2-10/+2
r=justdave a=LpSolit
2012-10-19Bug 803295: Bump the minimum requirement for DBI to 1.54Frédéric Buclin1-1/+2
r=glob a=LpSolit
2012-10-19Bug 531243: Bugzilla crashes on show_bug if it's hit while a custom field is ↵Frédéric Buclin1-1/+9
being added r=justdave a=LpSolit
2012-10-19Bug 780053: Oracle crashes when listing keywords, tags or flags in buglistsDavid Taylor1-9/+13
r/a=LpSolit
2012-10-16Bug 577329 - WebServices should filter email addresses same as the web UI as ↵Dave Lawrence9-22/+50
users are not always required to login r/a=LpSolit
2012-10-16Bug 604388 - Filenames used to store data for Old Charts should be based on ↵Marc Schumann6-71/+118
product IDs, not names (avoid dataloss when renaming products). r/a=LpSolit
2012-10-16Bug 799721: PostgreSQL 9.2 requires DBD::Pg 2.19.3Frédéric Buclin1-4/+5
r=glob a=LpSolit
2012-10-16Bug 797680: make "reset assignee/qa-contact to default" unchecked if the ↵Byron Jones2-11/+19
assignee/qa-contact has changed from defaults r=LpSolit, r=LpSolit
2012-10-15Bug 801569: Require DBD::Pg 2.7.0 to correctly work with PostgreSQL 8.3Frédéric Buclin1-1/+3
r=glob a=LpSolit
2012-10-14Bug 163890: editusers.cgi incorrectly treats "_" (underscore) as a wildcardSunil Joshi1-2/+1
r/a=LpSolit
2012-10-14Bug 363910: "Add a new query" should be renamedSunil Joshi2-17/+17
r/a=LpSolit
2012-10-14Bug 800842: Inconsistency in field names in editcomponents.cgiKoosha Khajeh Moogahi1-2/+2
r/a=LpSolit
2012-10-14Bug 781314: The behavior of tags changedFrédéric Buclin1-14/+6
r=wicked a=LpSolit
2012-10-13Fix typoFrédéric Buclin1-1/+1
2012-10-13Bug 532478: When attaching a file to a bug, display the max size allowed for ↵Sunil Joshi1-0/+3
attachments r/a=LpSolit
2012-10-13Bug 213440: quoteUrls() should permit multiple bug numbers to be linkified ↵Koosha Khajeh Moogahi1-0/+17
in comments r/a=LpSolit
2012-10-13Bug 330806: Reword the "Unknown Tab" and the "Invalid Keyword" error messagesSunil Joshi1-3/+2
r/a=LpSolit
2012-10-13Bug 335417: Minor tweaks to the description of the mybugstemplate and ↵Sunil Joshi1-3/+3
defaultquery parameters r/a=LpSolit
2012-10-13Bug 245375: Scheduled whining needs custom columnsAlbert Ting3-25/+38
r/a=LpSolit
2012-10-12Bug 791554: Make clear that 0 is a valid sortkey for flagtypesSunil Joshi2-3/+3
r/a=LpSolit
2012-10-12s/sortey/sortkey/gFrédéric Buclin1-2/+2
2012-10-12Bug 790129: Bugzilla->fields returns fields in random order (the sortkey is ↵Simon Green1-2/+3
ignored) r/a=LpSolit
2012-10-12Bug 793826: Prevent private web service methods from being calledKoosha Khajeh Moogahi1-1/+3
r=dkl a=LpSolit
2012-10-12Bug 297213: Submit button appears without having anything to submitSunil Joshi1-113/+106
r/a=LpSolit