summaryrefslogtreecommitdiffstats
path: root/Bugzilla
AgeCommit message (Collapse)AuthorFilesLines
2012-02-22Bumped version to 4.2Dave Lawrence1-1/+1
2012-02-22Bug 725663 - (CVE-2012-0453) [SECURITY] CSRF vulnerability in the XML-RPC ↵Dave Lawrence2-0/+16
API when using mod_perl r/a=LpSolit
2012-02-17merged with bugzilla/4.2Dave Lawrence6-38/+36
2012-02-17Bug 714370 - Add accessors to the Flag.pm object for modification_date and ↵Dave Lawrence1-13/+21
creation_date
2012-02-17Bug 721161 - Add to X-Bugzilla-Changed-Fields when a new attachment is ↵Dave Lawrence1-2/+2
created on a bug Changed from "Attachment Created" to "attachments.created" to match upstream
2012-02-16Bug 723944: Plain-text only emails are mangled when they contain non-ASCII ↵Frédéric Buclin1-1/+5
characters r=glob a=LpSolit
2012-02-15Bug 724464 - JSON-RPC support shouldn't require SOAP::LiteDave Lawrence2-20/+14
r/a=LpSolit
2012-02-15Bug 722113: The profile_search table has a wrong index nameFrédéric Buclin2-1/+7
r=glob a=LpSolit
2012-02-14Bug 714343 - Add ability to get flag information for bugs and attachments ↵Dave Lawrence1-4/+116
via the web service r=glob, r=LpSolit
2012-02-14Bug 727240: The POD for Bug.attachments is wrong about the format of the ↵Frédéric Buclin1-16/+10
returned data r=dkl a=LpSolit
2012-02-09merged with bugzilla/4.2Dave Lawrence1-1/+1
2012-02-01Bump the version number post-releaseDave Lawrence1-1/+1
2012-01-31Bumped to version 4.2rc2Dave Lawrence1-1/+1
2012-01-31merged with bugzilla/4.2Dave Lawrence4-20/+44
2012-01-31(CVE-2012-0440) [SECURITY] JSON-RPC permits to bypass token checks and can ↵Frédéric Buclin1-1/+13
lead to CSRF (no victim's action required) r=mkanat a=LpSolit https://bugzilla.mozilla.org/show_bug.cgi?id=718319
2012-01-31Bug 714472: (CVE-2012-0448) [SECURITY] utf8 homoglyphs are allowed in email ↵Frédéric Buclin2-2/+2
addresses, which could allow an attacker to be CC'ed to private bugs by accident r=glob a=LpSolit
2012-01-31Bug 714446: Product.create default behavior is broken and inconsistent with PODFrédéric Buclin1-17/+29
r=dkl a=LpSolit
2012-01-28merged with bugzilla/4.2Dave Lawrence3-5/+35
2012-01-27Bug 721715: URLs in the See Also field must be detainted before inserted ↵Frédéric Buclin1-4/+3
into the DB r=dkl a=LpSolit
2012-01-25Bug 717217: The regexp in Bugzilla::BugUrl::JIRA::should_handle() isn'tSimon Green1-1/+1
restrictive enough (min two letters required) r=timello, a=LpSolit
2012-01-25Bug 719526 - Add an extra mail header to messages containing a link to a ↵Dave Lawrence1-2/+10
first patch r=glob
2012-01-24Bug 718183: Rename duplicated series names before inserting the new index in ↵Frédéric Buclin1-0/+31
the series table r=dkl a=LpSolit
2012-01-24merged with bugzilla/4.2Dave Lawrence2-4/+21
2012-01-24Bug 715870: [Oracle] Related sequences and triggers must be removed when ↵Frédéric Buclin1-1/+19
dropping a table r=mkanat a=LpSolit
2012-01-24Bug 633061: Require Apache2::SizeLimit 0.96 for proper operation on LinuxMax Kanat-Alexander1-3/+2
r=dkl a=mkanat
2012-01-23Bug 719363: add instant searchByron Jones1-2/+2
2012-01-17merged with bugzilla/4.2Dave Lawrence9-4/+27
2012-01-12Bug 715731 - profile_search.user_id should have a FK pointing to profiles.useridDave Lawrence1-1/+4
r/a=LpSolit
2012-01-12Bug 717502: remove pdf from bugzilla/constantsByron Jones1-1/+0
2012-01-12Bug 717502: add PDF to the list of selectable content-typesReed Loden1-0/+1
2012-01-12Bug 715902: Do not log personal common activities in audit_logFrédéric Buclin8-3/+23
r=dkl a=LpSolit
2012-01-12Bug 715467 - Inconsistency in patch option linksDave Lawrence1-1/+1
2012-01-11Bug 714370 - Add accessors to the Flag.pm object for modification_date and ↵Dave Lawrence1-0/+13
creation_date r=glob
2012-01-11Bug 715806: deal with theschwartz sendmail errors correctlyByron Jones2-1/+98
2012-01-11merged with bugzilla/4.2Dave Lawrence1-3/+6
2012-01-11Bug 716227: When checksetup.pl tells the admin that he should edit variables ↵Frédéric Buclin1-3/+6
in localconfig, the message should be red r=timello a=LpSolit
2012-01-09715477: Inactive but set flags are no longer visible when editing a bugDave Lawrence3-5/+10
https://bugzilla.mozilla.org/show_bug.cgi?id=715477
2012-01-09merge with bugzilla/4.2Dave Lawrence1-1/+12
2012-01-09merge with bugzilla/4.2Dave Lawrence14-61/+212
2012-01-05Bug 706753: Bugzilla will not work with newest version of JSON::RPC 1.01 due ↵Frédéric Buclin1-1/+12
to non-backward compatibility r=dkl r=mkanat a=LpSolit
2011-12-29Bump the version number post-releaseDave Lawrence1-1/+1
2011-12-29Bump version for 4.2rc1Dave Lawrence1-1/+1
2011-12-28Bug 711714: (CVE-2011-3667) [SECURITY] The User.offer_account_by_email ↵Frédéric Buclin3-19/+45
WebService method lets you create new user accounts independently of the value of Bugzilla::Auth::Verify::*::user_can_create_account r=dkl a=LpSolit
2011-12-28Bug 697699 - (CVE-2011-3657) [SECURITY] XSS when viewing new charts or ↵Byron Jones1-1/+1
tabular and graphical reports in debug mode r=gerv, a=LpSolit
2011-12-28Bug 713144: The SQL query to remove older searches from the profile_search ↵Frédéric Buclin1-6/+8
table should be more robust r=dkl a=LpSolit
2011-12-26Bug 683644: Foreign keys aren't renamed correctly when DB tables are renamedFrédéric Buclin6-29/+120
r=wicked a=LpSolit
2011-12-21merged with bmo/4.0Dave Lawrence1-2/+2
2011-12-19Bug 711925: Update from 4.0 or older to 4.2 or trunk fails when bug_see_also ↵Frédéric Buclin2-2/+2
field is populated r=wicked a=LpSolit
2011-12-16Last Comment Bug 685611 - delta_ts is updated even when no changes are made ↵Dave Lawrence3-3/+35
to bugs created via WebServices r/a=LpSolit
2011-12-15merged with bugzilla/4.2Dave Lawrence2-15/+19
generated by cgit v1.2.3-24-g4f1b (git 2.32.0) at 2024-11-18 01:17:29 +0100