summaryrefslogtreecommitdiffstats
path: root/Bugzilla/CGI.pm
AgeCommit message (Collapse)AuthorFilesLines
2018-10-01Bug 1495071 - Mojolicious CleanupDylan William Hardison1-6/+0
There are some things that should've been in the first patch but were missed: 1. Calling $c->finish in the finally block should not happen if an exception has been raised. 2. Bugzilla->cleanup() should be called at the same time the mojolicious stash is cleared. 3. Code referencing the shutdownhtml should be removed 4. The conditionals that ran code in Bugzilla.pm when it was not run under mod_perl should instead check where the Bugzilla.pm module was loaded from. 5. Revert the default template from #770 6. Also removed some stuff that manipulates the PATH and signals, which we shouldn't do
2018-09-19Bug 1455495 - Replace apache with MojoliciousDylan William Hardison1-11/+25
2018-09-07Bug 1488292 - Remove MozReview extension from BMO code tree as MozReview is ↵dklawren1-6/+0
being decommissioned
2018-08-10Bug 602313 - Allow creation of attachments by pasting an image from ↵Kohei Yoshino1-1/+1
clipboard, as well as by drag-and-dropping a file from desktop
2018-07-27Bug 1419636 - Make Google Analytics use beacon/XHR instead of img tagKohei Yoshino1-2/+6
2018-05-01Bug 1453759 - Port OrangeFactor extension to treeherderIsrael Madueme1-1/+6
2018-04-25Bug 1456529 - Support SameSite attribute on session cookiesDylan William Hardison1-0/+2
2018-04-25Bug 1430367 - "preconnect" to google-analytics domain for improved performanceMarkus Staab1-0/+3
2018-03-20no bug - remove debugging for nowDylan William Hardison1-8/+10
2018-03-15Bug 1443058 - Backport 1087400 to bmo - CGI 4.05 throws tons of "CGI::param ↵Dylan William Hardison1-0/+14
called in list context" warnings
2018-03-08Bug 1441903 - Cleanup Makefile.PLDylan William Hardison1-22/+15
2018-03-05Backport 1136125 to bmo - Reduce memory usage of Bugzilla::CGI->send_cookie()Dylan William Hardison1-17/+2
2018-03-04Bug 1443003 - Port bug 1175211 to Harmony branch (Undefined subroutine ↵Dylan William Hardison1-1/+1
&Bugzilla::CGI::SERVER_PUSH)
2018-02-22Bug 1440107 - Allow 'self' frames in bug modal again (fix socorro lens)Dylan William Hardison1-1/+1
2018-02-21Bug 1439797 - Enable reporting-only CSP by defaultDylan William Hardison1-9/+7
2018-02-20Bug 1432296 - Prevent bugzilla static assets from being blocked by overly ↵Dylan William Hardison1-3/+13
long request URIs
2018-02-16Bug 1433400 (CVE-2018-5123) Prevent cross-site image requests from leaking ↵Dylan William Hardison1-0/+65
contents of certain fields due to regex search
2018-01-24Bug 1432812 - Send preload headers only for web-browser requestsDylan William Hardison1-9/+11
2018-01-12Bug 1426414 - Send preload headers for webfontsMarkus Staab1-0/+10
2018-01-03Bug 1427656 - Remove ZeroClipboard helperKohei Yoshino1-1/+0
2017-12-16Bug 1403777 - Migrate urlbase from params to localconfigDylan William Hardison1-16/+15
2017-11-28Bug 1379607 - Reimplement Google Analytics on bugzilla.mozilla.orgKohei Yoshino1-4/+4
2017-07-07Bug 1377933 - Remove trailing whitespace from all perl filesDylan William Hardison1-16/+16
2017-07-07Bug 1377232 - Revert code from bug 1361890Dylan William Hardison1-9/+1
2017-06-23Bug 1361890 - Fix problems with current js and css concatenationDylan William Hardison1-1/+9
2017-02-06Bug 1336387 - CSP breaks GitHubAuth on index and bug modal pagesDylan William Hardison1-15/+22
2017-01-31Bug 1335362 - CSP regression: MozReview requests section is broken ("Error ↵David Lawrence1-0/+6
loading review requests: unknown")
2017-01-26Bug 1334158 - Lightbox images CSP error on bug modalDylan William Hardison1-1/+10
2017-01-25Bug 1286290 - CSP compliant bug modalDylan William Hardison1-8/+38
2016-11-15Revert "Bug 1314201 - ThrowUserError and ThrowCodeError should print headers ↵Dylan William Hardison1-19/+4
if headers have not already been printed" This reverts commit 874e96c2423c772564c9dc63254baa99e86f270b.
2016-11-12Bug 1314201 - ThrowUserError and ThrowCodeError should print headers if ↵Dylan William Hardison1-4/+19
headers have not already been printed
2016-10-06Bug 1293689 - Bring Bugzilla::CGI::ContentSecurityPolicy to BMO (Backport ↵Dylan William Hardison1-10/+78
Bug 1286287)
2016-09-13Bug 1283930 - Add Makefile.PL & local/lib/perl5 support to bmo/master + ↵Dylan William Hardison1-21/+10
local symlink to data/ directory
2016-09-12Revert "Bug 1283930 - Add Makefile.PL & local/lib/perl5 support to ↵Dylan William Hardison1-10/+21
bmo/master + local symlink to data/ directory" This reverts commit e6bf4cacb10f86077fe898349485f5c7ab9fb4b6.
2016-09-12Bug 1283930 - Add Makefile.PL & local/lib/perl5 support to bmo/master + ↵Dylan William Hardison1-21/+10
local symlink to data/ directory
2015-12-01Bug 1229198 - When saving a buglist from a saved search as a CSV file, set ↵Byron Jones1-5/+4
the filename to <saved-query-name>.csv
2015-11-25Bug 1227866 - infinite loop consuming resources when PATH_INFO setByron Jones ‹:glob›1-1/+9
2015-11-05Bug 1196743 - Fix information disclosure vulnerability that allows attacker ↵Dylan Hardison1-0/+28
to obtain victim's GitHub OAuth return code
2015-06-03Bug 1170414: Redirection loop in *.cgi when path-info is presentByron Jones1-1/+5
2015-04-24Bug 1157395: CSRF in log in formDavid Lawrence1-0/+13
2014-11-04Bug 1093622: Backout bug 1090427 for causing: authenticated calls from bzapi ↵Byron Jones1-13/+0
are failing: 'Untrusted Authentication Request'
2014-11-04Bug 1090427: Backport bug 713926 to bmo/4.2 to protect against csrf for ↵David Lawrence1-0/+13
login forms
2014-07-21Bug 1041559: "Please wait while your bugs are retrieved" shown above menu ↵Byron Jones1-0/+15
header for search error pages
2014-07-10Bug 1032323: canonicalise_query() should omit parameters with empty values ↵Ed Morley1-2/+5
so generated URLs are shorter
2014-06-18Bug 1026863: buglist.cgi enters in an infinite loop if called without ↵Frédéric Buclin1-0/+4
arguments and the user is logged in
2013-09-30Bug 922246 - backport upstream bug 851267 to bmo/4.2 for performance ↵Dave Lawrence1-4/+4
improvement with large number of votes
2013-08-12Bug 894878 - CSV output template for request queues has gone awayDave Lawrence1-0/+25
r=glob
2013-08-09Bug 903514 - Backport upstream bug 569177 for etag support to bmo/4.2Dave Lawrence1-0/+20
2013-07-15Bug 892601 - Port over upstream native REST patch (bug 866927) to bmo/4.2Dave Lawrence1-1/+1
r=glob
2012-09-09Merge from bugzilla/4.2Reed Loden1-0/+4