summaryrefslogtreecommitdiffstats
path: root/Bugzilla/Auth/Login/Cookie.pm
AgeCommit message (Collapse)AuthorFilesLines
2016-05-03Bug 1268989 - Inefficient check of "Bugzilla_api_token" might lead to ↵Dylan William Hardison1-9/+6
CSRF/data disclosure vulnerability in Bugzilla's REST API r=dkl
2016-02-29Bug 1136137: Require Perl 5.14Frédéric Buclin1-1/+1
r=dkl
2015-03-09Bug 1139257: allow cookie+api-token GET REST requestsByron Jones1-8/+18
r=dkl,a=glob
2014-08-13Bug 996893: Perl 5.18 and newer throw tons of warnings about deprecated modulesFrédéric Buclin1-0/+1
r=dkl a=sgreen
2014-07-31Bug 1044701: "Uninitialized value $token_type" when passing an invalid ↵David Lawrence1-1/+4
Bugzilla_api_token value r=sgreen,a=glob
2014-07-27Bug 726696 - All authenticated WebServices methods should require ↵Simon Green1-1/+13
username/pass, token or a valid API key for authentication r=dkl, a=sgreen
2014-04-14Bug 987205: Bugzilla crashes because it tries to import a non-exported ↵Frédéric Buclin1-1/+2
login_token() subroutine from Bugzilla::Auth::Login::Cookie r=dkl a=justdave
2013-10-16Bug 907438 - In MySQL, login cookie checking is not case-sensitive, reducing ↵Dave Lawrence1-3/+3
total entropy and allowing easier brute force r=LpSolit,a=sgreen
2013-09-26Bug 917669 - invalid or expired authentication tokens and cookies should ↵Dave Lawrence1-8/+13
throw errors, not be silently ignored r/a=glob
2013-08-27Bug 893195 - Allow token based authentication for webservicesDave Lawrence1-14/+54
r=glob,a=sgreen
2012-12-01Bug 787668: Use |use parent| instead of |use base|Matt Selsky1-1/+1
r/a=LpSolit
2012-09-01Bug 787529: Use |use 5.10.1| everywhereFrédéric Buclin1-0/+3
r=wicked a=LpSolit
2012-01-11Bug 680131: Replace the MPL 1.1 license by the MPL 2.0 one in all files, and ↵Frédéric Buclin1-15/+5
add it to files which miss one r=kiko r=mkanat r=mrbball a=LpSolit
2010-04-22Bug 550732: Allow read-only JSON-RPC methods to be called with GETMax Kanat-Alexander1-0/+1
r=dkl, a=mkanat
2009-12-31Bug 527586: Use X-Forwarded-For instead of REMOTE_ADDR for trusted proxiesmkanat%bugzilla.org1-1/+1
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
2009-10-19Bug 399073: Remove the 'loginnetmask' parameter - Patch by Frédéric ↵lpsolit%gmail.com1-17/+8
Buclin <LpSolit@gmail.com> r/a=mkanat
2006-07-06Bug 340967: The login form appears twice when trying to add an attachment ↵lpsolit%gmail.com1-0/+15
(due to two consecutive calls to Bugzilla->login) - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
2006-06-19Spelling in code comments patch: 'cokie' -> 'cookie'; patch by Vlad Dascalu ↵vladd%bugzilla.org1-1/+1
<vladd@bugzilla.org>.
2006-06-03Bug 340104: Move Bugzilla::Auth::get_netaddr() in Util.pm - Patch by ↵lpsolit%gmail.com1-2/+1
Frédéric Buclin <LpSolit@gmail.com> r/a=justdave
2006-06-01Bug 339858: Remove useless module dependencies in Bugzilla::Auth::* - Patch ↵lpsolit%gmail.com1-1/+0
by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave
2006-05-12Bug 300410: Bugzilla::Auth needs to be restructured to not require a BEGIN blockmkanat%bugzilla.org1-0/+83
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk