summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2016-05-05Due to bug 218917, checksetup_answers.txt needs ADMIN_LOGIN to be defined ↵David Lawrence1-0/+1
properly.
2016-05-03Bug 1268989 - Inefficient check of "Bugzilla_api_token" might lead to ↵Dylan William Hardison1-9/+6
CSRF/data disclosure vulnerability in Bugzilla's REST API r=dkl
2016-05-02Add build.platform = linux64, machine.platform = linux64 to taskgraph.json ↵David Lawrence1-6/+42
to remove b2gtest from Treeherder results
2016-05-02Bug 1269252 - Using callback parameter with REST API causes read-only ↵David Lawrence1-5/+1
accessor error in Bugzilla/API/Server.pm r=dylan
2016-04-28Bug 1268174 - [PostgreSQL] $dbh->bz_add_column() fails to create new columns ↵Frédéric Buclin2-8/+36
with the NOT NULL constraint if there is no DEFAULT value r=gerv
2016-04-27Bug 1268146 - profiles.email is set back to match profiles.login_name every ↵Frédéric Buclin1-2/+4
time checksetup.pl is run r=gerv
2016-04-27Bug 218917 - Allow the login name to be different from the email addressFrédéric Buclin78-598/+1014
Original patch by Gervase Markham r=gerv a=dkl
2016-04-26fix module metadataDylan William Hardison4-10/+19
2016-04-26Bug 1267536 - Javascript errors in advanced search pageMatt Tyson2-1/+2
r=dylan,a=dylan
2016-04-25Bug 1259881 - CSV export vulnerable to formulae injection (again)Frédéric Buclin1-3/+4
r=sgreen
2016-04-20Bug 542239 - Accept pronouns everywhere in query.cgiAlbert Ting2-3/+3
r=dkl
2016-04-15Bug 1232171 - 'make clean' shouldn't delete rst/, images/ and Makefile, only ↵Frédéric Buclin1-1/+1
generated files r=gerv
2016-04-15Bug 1261679 - Add more examples about how to define new parameters using the ↵Frédéric Buclin3-7/+70
config_add_panels hook r=gerv
2016-04-14Bug 1088022 - Bump min version to CGI 4.09Frédéric Buclin54-284/+240
r=dkl
2016-04-13Bug 1154457 - Extra lines for nested MarkDown listsAlbert Ting1-0/+11
r=dkl
2016-04-13Bug 398546 - config.cgi using the RDF format can generate a pretty large fileFrédéric Buclin4-21/+35
r=dkl
2016-04-13Bug 619847 - Attachment filenames with UTF-8 characters download with an ↵Frédéric Buclin1-9/+9
incorrect filename Thanks to nE0sIghT for the original idea r=dkl
2016-04-12Bug 1263923 - X-Bugzilla-Who header is not set for flag mailsFrédéric Buclin1-1/+1
r=dkl
2016-04-10Email::MIME::Attachment::Stripper is no longer used, see bug 437076Frédéric Buclin1-2/+1
2016-04-09Bug 1204957 - Locally compiled POD documentation is no longer accessible ↵Frédéric Buclin4-12/+25
from docs/en/html/api/ r=dkl
2016-04-09Bug 1261538 - Bugzilla is unable to access attachment.cgi when ssl_redirect ↵Frédéric Buclin3-21/+39
= true and using Plack r=dylan
2016-04-06Bug 1246228 - Email addresses must not be encodedFrédéric Buclin3-14/+3
r=dkl
2016-04-05Bug 1261124: When deleting a component, this component is listed againFrédéric Buclin1-1/+4
r=dkl
2016-04-04Bug 880163 - add a webservice method to list a bug's duplicates, mirroring ↵David Lawrence3-7/+18
what is visible on show_bug. r=dylan
2016-04-01Bug 1260027: Document how to compile the documentation on WindowsFrédéric Buclin2-16/+40
r=gerv
2016-04-01Bug 1200010: The Quick Start doc should stop assuming Bugzilla is your ↵Frédéric Buclin1-16/+12
single application r=gerv
2016-03-27Bug 1205072: Markdown should not call quoteUrl() for code sectionsAlbert Ting1-9/+29
r=LpSolit
2016-03-27Bug 987742 (part 2): correctly detaint $ENV{PATH} on Strawberry PerlFrédéric Buclin1-0/+1
2016-03-26Split long linesFrédéric Buclin1-71/+202
2016-03-25Bug 1257224: Windows-specific modules are missing in Makefile.PLFrédéric Buclin2-1/+8
r=dylan
2016-03-23Bug 1254226: XSS through javascript: callback URLs in auth delegationFrédéric Buclin2-0/+7
r=dylan
2016-03-21Bug 1258187: When using plackup as a proxy, Apache is unable to handle saved ↵Frédéric Buclin1-4/+2
queries correctly r=dkl
2016-03-21Bug 1251208 - Bugzilla->request_cache() can be fasterDylan Hardison2-37/+8
r=dkl,a=dylan without breaking stuff this time.
2016-03-19Bug 1230932: Providing a condition as an ID to the webservice results in a ↵Frédéric Buclin7-7/+39
taint error r=dkl
2016-03-16Remove unused variable (leftover from bug 1201113)Frédéric Buclin1-1/+0
2016-03-15Bug 1253267: DOT injection vulnerability in dependency graphs when long bug ↵Frédéric Buclin1-0/+3
summaries are wrapped r=dkl
2016-03-11Back out bug 1251208: it makes checksetup.pl to never end and localconfig is ↵Frédéric Buclin1-6/+28
erased
2016-03-09Bug 1250908: "Use of uninitialized value" warning thrown when creating a new ↵Thorsten Schöning1-2/+2
bug depending or blocking another one r=LpSolit
2016-03-08Bug 1253074 - get_legal_value doesn't work for target milestoneAlbert Ting1-4/+5
r=dkl
2016-03-08Bug 1252880 - Log In URL provided after Advanced Search is incorrectly ↵Ryan Wilson1-1/+1
formatted. r=dkl
2016-03-08Bug 314366 - "Enter the path to the file on your computer" assumes I choose ↵Craig Parkinson1-3/+2
a file by entering a path r=dkl
2016-03-07Bug 1251672: "cpanm" is easier to remember and to type than "curl -L ↵Frédéric Buclin2-7/+14
http://cpanmin.us | perl -" r=dylan
2016-03-06IIS instructions work with Windows 10 tooFrédéric Buclin1-1/+2
2016-03-05Some more cleanup in xt/Frédéric Buclin4-5/+15
2016-02-29Bug 1136137: Require Perl 5.14Frédéric Buclin353-427/+430
r=dkl
2016-02-29Bug 1251208 - Bugzilla->request_cache() can be fasterDylan Hardison1-28/+6
r=dkl,a=dylan
2016-02-26generate_test_data.pl is an executableFrédéric Buclin1-0/+1
2016-02-26Bug 1069799 - move the QA repository into the main repositoryDavid Lawrence97-3571/+12187
r=LpSolit
2016-02-26Bug 1250043 - Updated docker config to use new method if installing ↵David Lawrence5-32/+23
dependencies (Makefile.PL)
2016-02-26Bug 1251221 - Pass cache => 1 to calls to Bugzilla::Product->new() called in ↵Dylan Hardison3-6/+5
Bugzilla::{Milestone,Version,Component} r=dkl,a=dylan