summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2016-01-07Addl. fix for bug 1089448: also detaint $ENV{WINDIR} on WindowsFrédéric Buclin1-1/+1
2016-01-06Bug 1236240 - Replying is broken when markdown is enabledDylan Hardison1-1/+2
r=dkl,a=dylan
2016-01-05Bug 1235270: Set submitter_id before calling _check_data()Mahdi Mokhtari1-1/+2
r=LpSolit
2016-01-05Bug 1045782: Existing URLs in the See Also field should not throw an error ↵Frédéric Buclin1-2/+3
when the bug is displayed r=dkl
2016-01-04Bug 1191706: When editing flag types, components do not match the selected ↵Frédéric Buclin7-86/+51
product when classifications are enabled r=dkl
2016-01-02Bug 1202853 - Markdown doesn't work when adding a comment attachmentAlbert Ting1-1/+4
r=dylan,a=dylan
2016-01-02Bug 688205 - quoted text inside comments should wrapAlbert Ting4-4/+38
r=dylan,a=dylan
2015-12-29Bug 1235271: Remove .htaccess from .gitignoreFrédéric Buclin2-2/+0
r=dkl
2015-12-28Bug 1235415: Use "AllowOverride All" everywhereFrédéric Buclin1-1/+1
2015-12-23Bug 1201113: Support to run Bugzilla as a PSGI applicationFrédéric Buclin18-94/+197
r=dylan
2015-12-22Revert "Bug 1230932 - Providing a condition as an ID to the webservice ↵David Lawrence6-25/+23
results in a taint error" This reverts commit eb1357fe03bb47cdd479cf533022e11dd6bd22e0.
2015-12-22Bug 1232785 - [SECURITY] Buglists in CSV format can be parsed as valid ↵Dylan Hardison1-0/+3
javascript in some browsers r=dkl,a=dkl
2015-12-22Bug 1221518: (CVE-2015-8508) [SECURITY] XSS in dependency graphs when ↵Frédéric Buclin1-5/+8
displaying the bug summary r=gerv a=dkl
2015-12-22Bug 1230932 - Providing a condition as an ID to the webservice results in a ↵Dylan Hardison6-23/+25
taint error r=dkl,a=dkl
2015-12-22Update release notesFrédéric Buclin1-1/+1
2015-12-21Bug 1234297: "GET /rest/last_audit_time" complains that you must use POSTFrédéric Buclin1-0/+1
r=dkl
2015-12-21Bug 1139755: Allow API authentication with X-HeadersFrédéric Buclin1-3/+12
2015-12-21Bug 1234056: The "Create Comments" documentation incorrectly mentions that ↵Frédéric Buclin1-5/+0
you can add a comment to several bugs at once r=dkl
2015-12-21Need to uncomment another line in httpd.conf, see bug 1207582Frédéric Buclin1-1/+2
2015-12-18Bug 1232190: FlagType.create should require the user to be logged inFrédéric Buclin2-14/+6
r=dkl
2015-12-18Bug 1232186: Component.update and Component.delete are brokenFrédéric Buclin2-12/+10
r=dkl
2015-12-16Bug 1232578: Do not save hashed passwords in audit_logFrédéric Buclin2-1/+46
r=dkl
2015-12-16Product.get_products is no longer supported, see bug 1160394Frédéric Buclin1-3/+4
2015-12-16Bug 1232180 - Incorrect regexp used to filter bug IDs in ↵Dylan Hardison2-4/+4
Bugzilla::WebService::BugUserLastVisit r=dkl,a=dkl
2015-12-16Bug 1169181 - The bug_user_last_visit method returns an empty array for old bugsDylan Hardison2-2/+2
r=dkl,a=dkl bringing this in line with the 5.0 fix because it's too simple to pass up.
2015-12-16Bug 1160394 - Products.get_products is missing from PUBLIC_METHODS (for ↵Matt Tyson2-18/+0
backwards compatibility) r=dkl,a=dkl
2015-12-11Release notes for Bugzilla 5.0.2Frédéric Buclin1-0/+27
r=dkl
2015-12-10Bug 1169181 - The bug_user_last_visit method returns an empty array for old bugsDylan Hardison3-30/+23
r=dkl
2015-12-10Email::Send is no longer usedFrédéric Buclin1-5/+3
2015-12-09Bug 1041959: Turn all labels for input fields in user preferences into ↵Mukhtar Ali4-19/+30
<label> elements r=LpSolit
2015-12-02Bug 1219276: Creating a new group fails if a custom extension adds entries ↵Alex Schuilenburg2-9/+15
to group_control_map and "insertnew" is selected r=LpSolit
2015-12-02Back out bug 1138463. This fix is actually incorrect and the bug was ↵Frédéric Buclin2-56/+10
correctly fixed by bug 1223790 a=dkl on IRC
2015-11-25Bug 1227455 - Multiselect parameters (type 'm') are not read correctly from ↵Pami Ketolainen2-2/+11
the new JSON storage format r/a=dkl
2015-11-21Bug 1226865 - bug fixes to localization documentation.Gervase Markham4-24/+28
2015-11-21Bug 1223554: Add <div></div> in the email preferences page to customize ↵Dan Langille1-8/+16
sections.
2015-11-20Bug 1223790: "AllowOverride AuthConfig" is required to use the "Require" ↵Frédéric Buclin3-3/+3
directive in .htaccess r=gerv
2015-11-19Bug 1196126: Long lines in custom non-editable textarea fields should wrapFrédéric Buclin1-4/+1
r=dkl
2015-11-06Bug 1222416: The group list must use 'class' instead of 'align'Alex Schuilenburg2-3/+3
r=justdave
2015-10-26Bug 1214310: Markdown code blocks can display comments from other bugsAlbert Ting1-5/+8
r=dylan
2015-10-21The cookiepath parameter is gone, see bug 399067Frédéric Buclin1-4/+0
2015-10-21Bug 1200604: The URL Rewrite extension for IIS is needed to use the rest/ ↵Frédéric Buclin1-0/+23
shortcut in URLs (instead of rest.cgi/) r=gerv
2015-10-21XMLRPC works with IIS, see bug 708252Frédéric Buclin1-3/+0
2015-10-19Bug 1207582: Update instructions to install Apache on Windows (the Apache ↵Frédéric Buclin1-75/+74
MSI no longer exists) r=gerv
2015-10-19Bug 1209926: Document that Strawberry Perl fully works with Bugzilla 5.0.2 ↵Frédéric Buclin1-25/+35
and newer r=gerv
2015-10-19Bug 1210078: Going back from the "Match failed" page deletes the values of ↵Frédéric Buclin2-0/+14
user fields r=gerv
2015-09-30Bug 987742: Strawberry Perl requires C:\strawberry\c\bin\ to be in ↵Frédéric Buclin1-8/+16
$ENV{PATH} to correctly load XS modules r=gerv
2015-09-30Bug 1156785 - add new Localization Guide for in-place review.Gervase Markham26-5/+955
2015-09-25Bug 1089448: Strawberry Perl throws a "Insecure dependency in sysopen" error ↵Frédéric Buclin1-0/+8
when attaching a file r=gerv
2015-09-25Bug 1201266: Migrate YUI calendar to jQueryFrédéric Buclin17-259/+60
r=gerv
2015-09-25Bug 1204238: Migrate tabular report sorting from YUI to jQueryFrédéric Buclin7-185/+240
r=gerv