summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2016-05-13Bug 1208947 - Comment links in markdown-based emails are incompleteAlbert Ting2-17/+12
r=LpSolit
2016-05-13Bug 1269388 - Release notes for Bugzilla 5.0.3Frédéric Buclin1-0/+34
r=dkl
2016-05-13Bug 1250114 - XSS possible in extensions calling global/tabs.html.tmpl if ↵Dylan William Hardison1-1/+1
tab.link is user-controlled
2016-05-13Rationalise lists of built-in groups and their capabilities into one correct ↵Gervase Markham3-80/+60
list. r=dylan
2016-05-12Bug 1270991 - Update jQuery to 1.12.xFrédéric Buclin4-178/+180
r=dkl
2016-05-12Bug 1269160 - Localconfig.pm: LOCALCONFIG_VARS docs and functionality lossKenneth Lorber1-8/+13
r=dylan
2016-05-12Bug 645282 - Document how to configure nginx to work with BugzillaAlex Xu1-3/+79
r=dylan
2016-05-10re-add check-modulesDylan William Hardison1-2/+2
2016-05-10nit: include --skip-satisfied and --quiet for checksetup cpanm helper.Dylan William Hardison1-2/+2
2016-05-10Bug 1270536 - Provide helper script to run cpanm with sane default argumentsDylan William Hardison1-1/+28
2016-05-10Bug 1251100 - checksetup.pl no longer tells admins which modules are ↵Dylan William Hardison24-188/+9205
installed and which version is installed
2016-05-10Bug 1270550 - Can't locate loadable object for module ↵Dylan Hardison5-0/+9
main::Tie::Hash::NamedCapture in @INC r=dkl
2016-05-05Bug 1258157 - Document how to run Bugzilla as a PSGI application from ApacheFrédéric Buclin1-4/+51
r=dylan
2016-05-05Due to bug 218917, checksetup_answers.txt needs ADMIN_LOGIN to be defined ↵David Lawrence1-0/+1
properly.
2016-05-03Bug 1268989 - Inefficient check of "Bugzilla_api_token" might lead to ↵Dylan William Hardison1-9/+6
CSRF/data disclosure vulnerability in Bugzilla's REST API r=dkl
2016-05-02Add build.platform = linux64, machine.platform = linux64 to taskgraph.json ↵David Lawrence1-6/+42
to remove b2gtest from Treeherder results
2016-05-02Bug 1269252 - Using callback parameter with REST API causes read-only ↵David Lawrence1-5/+1
accessor error in Bugzilla/API/Server.pm r=dylan
2016-04-28Bug 1268174 - [PostgreSQL] $dbh->bz_add_column() fails to create new columns ↵Frédéric Buclin2-8/+36
with the NOT NULL constraint if there is no DEFAULT value r=gerv
2016-04-27Bug 1268146 - profiles.email is set back to match profiles.login_name every ↵Frédéric Buclin1-2/+4
time checksetup.pl is run r=gerv
2016-04-27Bug 218917 - Allow the login name to be different from the email addressFrédéric Buclin78-598/+1014
Original patch by Gervase Markham r=gerv a=dkl
2016-04-26fix module metadataDylan William Hardison4-10/+19
2016-04-26Bug 1267536 - Javascript errors in advanced search pageMatt Tyson2-1/+2
r=dylan,a=dylan
2016-04-25Bug 1259881 - CSV export vulnerable to formulae injection (again)Frédéric Buclin1-3/+4
r=sgreen
2016-04-20Bug 542239 - Accept pronouns everywhere in query.cgiAlbert Ting2-3/+3
r=dkl
2016-04-15Bug 1232171 - 'make clean' shouldn't delete rst/, images/ and Makefile, only ↵Frédéric Buclin1-1/+1
generated files r=gerv
2016-04-15Bug 1261679 - Add more examples about how to define new parameters using the ↵Frédéric Buclin3-7/+70
config_add_panels hook r=gerv
2016-04-14Bug 1088022 - Bump min version to CGI 4.09Frédéric Buclin54-284/+240
r=dkl
2016-04-13Bug 1154457 - Extra lines for nested MarkDown listsAlbert Ting1-0/+11
r=dkl
2016-04-13Bug 398546 - config.cgi using the RDF format can generate a pretty large fileFrédéric Buclin4-21/+35
r=dkl
2016-04-13Bug 619847 - Attachment filenames with UTF-8 characters download with an ↵Frédéric Buclin1-9/+9
incorrect filename Thanks to nE0sIghT for the original idea r=dkl
2016-04-12Bug 1263923 - X-Bugzilla-Who header is not set for flag mailsFrédéric Buclin1-1/+1
r=dkl
2016-04-10Email::MIME::Attachment::Stripper is no longer used, see bug 437076Frédéric Buclin1-2/+1
2016-04-09Bug 1204957 - Locally compiled POD documentation is no longer accessible ↵Frédéric Buclin4-12/+25
from docs/en/html/api/ r=dkl
2016-04-09Bug 1261538 - Bugzilla is unable to access attachment.cgi when ssl_redirect ↵Frédéric Buclin3-21/+39
= true and using Plack r=dylan
2016-04-06Bug 1246228 - Email addresses must not be encodedFrédéric Buclin3-14/+3
r=dkl
2016-04-05Bug 1261124: When deleting a component, this component is listed againFrédéric Buclin1-1/+4
r=dkl
2016-04-04Bug 880163 - add a webservice method to list a bug's duplicates, mirroring ↵David Lawrence3-7/+18
what is visible on show_bug. r=dylan
2016-04-01Bug 1260027: Document how to compile the documentation on WindowsFrédéric Buclin2-16/+40
r=gerv
2016-04-01Bug 1200010: The Quick Start doc should stop assuming Bugzilla is your ↵Frédéric Buclin1-16/+12
single application r=gerv
2016-03-27Bug 1205072: Markdown should not call quoteUrl() for code sectionsAlbert Ting1-9/+29
r=LpSolit
2016-03-27Bug 987742 (part 2): correctly detaint $ENV{PATH} on Strawberry PerlFrédéric Buclin1-0/+1
2016-03-26Split long linesFrédéric Buclin1-71/+202
2016-03-25Bug 1257224: Windows-specific modules are missing in Makefile.PLFrédéric Buclin2-1/+8
r=dylan
2016-03-23Bug 1254226: XSS through javascript: callback URLs in auth delegationFrédéric Buclin2-0/+7
r=dylan
2016-03-21Bug 1258187: When using plackup as a proxy, Apache is unable to handle saved ↵Frédéric Buclin1-4/+2
queries correctly r=dkl
2016-03-21Bug 1251208 - Bugzilla->request_cache() can be fasterDylan Hardison2-37/+8
r=dkl,a=dylan without breaking stuff this time.
2016-03-19Bug 1230932: Providing a condition as an ID to the webservice results in a ↵Frédéric Buclin7-7/+39
taint error r=dkl
2016-03-16Remove unused variable (leftover from bug 1201113)Frédéric Buclin1-1/+0
2016-03-15Bug 1253267: DOT injection vulnerability in dependency graphs when long bug ↵Frédéric Buclin1-0/+3
summaries are wrapped r=dkl
2016-03-11Back out bug 1251208: it makes checksetup.pl to never end and localconfig is ↵Frédéric Buclin1-6/+28
erased