Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2014-07-24 | Bug 1036213 - (CVE-2014-1546) add '/**/' before jsonrpc.cgi callback to ↵ | Simon Green | 1 | -2/+3 | |
avoid swf content type sniff vulnerability r=glob,a=sgreen | |||||
2014-07-24 | Bump version to 4.2.10 | David Lawrence | 1 | -1/+1 | |
2014-04-21 | Bumped version post-release | David Lawrence | 1 | -1/+1 | |
2014-04-19 | Bump version to 4.2.9 | David Lawrence | 1 | -1/+1 | |
2014-04-18 | Bug 998323 - URLs pasted in comments are no longer displayed | David Lawrence | 1 | -14/+11 | |
r=LpSolit,a=justdave | |||||
2014-04-17 | Bumped version post-release | David Lawrence | 1 | -1/+1 | |
2014-04-17 | Bump version to 4.2.8 | David Lawrence | 1 | -1/+1 | |
2014-04-17 | Bug 968576: [SECURITY] Dangerous control characters allowed in Bugzilla text | Manish Goregaokar | 2 | -0/+15 | |
r=glob a=justdave | |||||
2013-12-21 | Bug 748095: Bugzilla crashes when the shutdownhtml parameter is set and ↵ | Frédéric Buclin | 1 | -1/+1 | |
using a non-cookie based authentication method r=dkl a=justdave | |||||
2013-12-05 | Bug 942599: Documentation about possible_duplicates() lists 'products' as ↵ | Frédéric Buclin | 1 | -1/+1 | |
argument instead of 'product' r=dkl a=justdave | |||||
2013-12-02 | Bug 938300: vers_cmp() incorrectly compares module versions | Frédéric Buclin | 1 | -15/+14 | |
r=sgreen a=justdave | |||||
2013-12-02 | Bug 781672: checksetup.pl fails to check the version of the latest ↵ | Frédéric Buclin | 1 | -2/+9 | |
Apache2::SizeLimit release (it throws "Invalid version format (non-numeric data)") r=dkl a=justdave | |||||
2013-11-14 | Bug 938161: sql_date_format() method for SQLite has an incorrect default format | Frédéric Buclin | 1 | -1/+1 | |
r/a=glob | |||||
2013-11-13 | Bug 843457: PROJECT environment variable is not honored when mod_perl is enabled | Frédéric Buclin | 1 | -3/+11 | |
r/a=glob | |||||
2013-10-17 | Bump version post-release | Dave Lawrence | 1 | -1/+1 | |
2013-10-16 | Bump version to 4.2.7 | Dave Lawrence | 1 | -1/+1 | |
2013-10-16 | Bug 907438 - In MySQL, login cookie checking is not case-sensitive, reducing ↵ | Dave Lawrence | 1 | -3/+3 | |
total entropy and allowing easier brute force r=LpSolit,a=sgreen | |||||
2013-10-16 | Bug 906745 - In MySQL, tokens are not case-sensitive, reducing total entropy ↵ | Dave Lawrence | 1 | -5/+17 | |
and allowing easier brute force r=LpSolit,a=glob | |||||
2013-09-23 | Bug 919475: [Oracle] Crash when non-mandatory free text custom fields are ↵ | Jiří Netolický | 1 | -0/+4 | |
left empty on bug creation r=LpSolit a=justdave | |||||
2013-08-09 | Bug 897264 - letters_numbers_specialchars password restriction is incorrect | Simon Green | 1 | -1/+1 | |
r=LpSolit, a=sgreen | |||||
2013-07-24 | Bug 880653 - Add POD for Bug.possible_duplicates webservice | Dave Lawrence | 1 | -0/+53 | |
r=LpSolit,a=sgreen | |||||
2013-07-15 | Bug 787328 - xmlrpc.cgi doesn't send any security-related headers | Dave Lawrence | 1 | -2/+10 | |
r=glob,a=justdave | |||||
2013-05-22 | Bump version post-release | Dave Lawrence | 1 | -1/+1 | |
2013-05-22 | Bump version to 4.2.6 | Dave Lawrence | 1 | -1/+1 | |
2013-05-20 | Bug 828344: "contains all of the words" no longer looks for all words within ↵ | Byron Jones | 6 | -42/+152 | |
the same comment or flag r=LpSolit, a=LpSolit | |||||
2013-05-04 | Bug 859118 - Bug.search called with no arguments returns all visible bugs, ↵ | Dave Lawrence | 2 | -11/+48 | |
ignoring max_search_results and search_allow_no_criteria r/a=LpSolit | |||||
2013-04-28 | Bug 848635: Old queries based on tags are no longer listed in the page ↵ | Frédéric Buclin | 1 | -6/+1 | |
footer by default when upgrading from 4.0 or older to 4.2 r=glob a=LpSolit | |||||
2013-04-28 | Bug 858909: When running checksetup.pl for the first time using Oracle as DB ↵ | Frédéric Buclin | 1 | -1/+1 | |
server, you get an "uninitialized value" warning r=dkl a=LpSolit | |||||
2013-04-18 | Bug 858911: Oracle fails with "ORA-04043: object T_GROUP_CONCAT does not ↵ | Frédéric Buclin | 1 | -1/+3 | |
exist" when installing Bugzilla for the first time r=dkl a=LpSolit | |||||
2013-04-17 | revert commit for bug 828344 | Byron Jones | 3 | -138/+34 | |
2013-04-17 | Bug 828344: Make "contains all of the words" look for all words within the ↵ | Byron Jones | 3 | -34/+138 | |
same comment or flag r=LpSolit, a=LpSolit | |||||
2013-04-16 | Bug 782210: If a custom field depends on a product, component or ↵ | Pami Ketolainen | 2 | -8/+13 | |
classification, the "mandatory" bit is ignored on bug creation r/a=LpSolit | |||||
2013-04-15 | Bug 861528: $user->can_enter_product() now returns the product object ↵ | Frédéric Buclin | 1 | -2/+3 | |
instead of 1 r=glob a=LpSolit | |||||
2013-03-26 | Bug 854074: Remove all references to the uwinnipeg.ca PPM repository as it ↵ | Frédéric Buclin | 1 | -20/+0 | |
is no longer available r=glob a=LpSolit | |||||
2013-03-20 | Bug 852560: Bugzilla cannot be installed with MySQL 5.6, because the ↵ | Frédéric Buclin | 1 | -3/+2 | |
have_innodb variable no longer exists r=glob a=LpSolit | |||||
2013-02-20 | Bump version post-release | Dave Lawrence | 1 | -1/+1 | |
2013-02-19 | Bump version to 4.2.5 | Dave Lawrence | 1 | -1/+1 | |
2013-02-19 | Bug 842038: (CVE-2013-0785) [SECURITY] XSS in show_bug.cgi when using an ↵ | Frédéric Buclin | 1 | -0/+1 | |
invalid page format r=glob a=LpSolit | |||||
2013-02-19 | Bug 824399: (CVE-2013-0786) [SECURITY] build_subselect() leaks the existence ↵ | Simon Green | 1 | -0/+8 | |
of products and components you cannot access r/a=LpSolit | |||||
2013-02-17 | Bug 839950: Cannot search by Change History on multi-select fields | Matt Tyson | 1 | -2/+6 | |
r/a=LpSolit | |||||
2013-02-16 | Bug 840824: It is possible to create a new bug with a non active target ↵ | Simon Green | 1 | -6/+3 | |
milestone, version or component r/a=LpSolit | |||||
2013-01-17 | Bug 752946 - Fixed uninitialized error | Dave Lawrence | 1 | -1/+1 | |
2013-01-17 | Bug 752946 - Moving a bug into another product lists inactive components, ↵ | Dave Lawrence | 1 | -7/+21 | |
milestones and versions r/a=LpSolit | |||||
2013-01-14 | Bug 829939: Only build default_authorizer on request | Frédéric Buclin | 1 | -1/+1 | |
r=glob a=LpSolit | |||||
2013-01-06 | Bug 826678: Disable warnings about the deprecated Return::Value module when ↵ | Frédéric Buclin | 3 | -0/+19 | |
loading Email::Send r=wicked a=LpSolit | |||||
2012-12-17 | Bug 818890: Bugzilla doesn't obey the "Comment required on status ↵ | Alexander Tereschenko | 1 | -1/+1 | |
transition" for {Start}-> transition (for new bugs) r/a=LpSolit | |||||
2012-12-07 | Bug 818007: Searching by commenter is slow | Frédéric Buclin | 1 | -1/+1 | |
r=dkl a=LpSolit | |||||
2012-11-29 | Bug 579189 - New methods added to Bugzilla/User.pm by bug 24896 have no POD | Hugo | 1 | -0/+29 | |
r=dkl, a=LpSolit | |||||
2012-11-20 | Bug 640756 - Make the documentation clearer that attachments created with ↵ | Dave Miller | 1 | -1/+3 | |
Bug.add_attachment must by of type 'base64' when non-ASCII . r=LpSolit, a=LpSolit | |||||
2012-11-14 | Bump version post-release | Dave Lawrence | 1 | -1/+1 | |
https://bugzilla.mozilla.org/show_bug.cgi?id=805644 |