summaryrefslogtreecommitdiffstats
path: root/attachment.cgi
AgeCommit message (Collapse)AuthorFilesLines
2009-03-30Bug 476603 - "[SECURITY] Editing attachments doesn't have any CSRF ↵reed%reedloden.com1-0/+9
protection" [p=reed r=LpSolit a=LpSolit]
2009-02-02Bug 472206: [SECURITY] Bugzilla should optionally not allow the user to view ↵lpsolit%gmail.com1-1/+3
possibly harmful attachments - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat r=justdave a=LpSolit
2009-02-02Bug 38862: [SECURITY] attachments should be at a different hostname - Patch ↵lpsolit%gmail.com1-9/+95
by Byron Jones <bugzilla@glob.com.au> and Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit
2008-12-17Bug 467171: Editing attachments doesn't update the Last-Modified bug ↵lpsolit%gmail.com1-0/+13
timestamp - Patch by A.A. Shimono <shimono@mozilla.gr.jp> r/a=LpSolit
2008-09-18Bug 452734: Remove the keyword chooser, because it's a usability regressionmkanat%bugzilla.org1-3/+0
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat
2008-09-09Bug 388251: Implement 'new Bugzilla::Attachment' - Patch by Frédéric ↵lpsolit%gmail.com1-5/+4
Buclin <LpSolit@gmail.com> a=LpSolit
2008-09-08Bug 453743: Decrease the number of calls to the DB about flags when viewing ↵lpsolit%gmail.com1-19/+1
a bug - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat
2008-06-30Bug 440612 – Use Bugzilla::Bug->check everywhere instead of ValidateBugIDmkanat%bugzilla.org1-11/+10
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
2008-06-28Bug 422691 – Attachment gets added twice after hitting "Back" and "Refresh"dkl%redhat.com1-0/+31
Patch by David Lawrence <dkl@redhat.com> - r/a=LpSolit
2008-04-03Bug 410902: Some characters are mangled in diff and interdiff modes when ↵lpsolit%gmail.com1-3/+1
viewing patches - Patch by Frédéric Buclin <LpSolit@gmail.com> r=shimono, r=mkanat a=LpSolit
2008-02-05Bug 414604: After inserting/editing/deleting an attachment, the Keywords ↵lpsolit%gmail.com1-0/+7
field is unavailable - Patch by Frédéric Buclin <LpSolit@gmail.com> r=ghendricks r=mkanat a=mkanat
2008-02-04Bug 415155: Remove $cgi from the list of arguments when calling ↵lpsolit%gmail.com1-2/+2
Bugzilla::Flag subroutines - Patch by Frédéric Buclin <LpSolit@gmail.com> a=LpSolit
2008-02-04Bug 413772: Eliminate sqlify_criteria() in Bugzilla::Flag and replace ↵lpsolit%gmail.com1-2/+2
match() there with Bugzilla::Object::match() - Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r/a=LpSolit
2008-01-21Bug 373281: Remove AppendComment entirely in favor of ↵lpsolit%gmail.com1-31/+33
Bugzilla::Bug->add_comment - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat
2008-01-20Bug 413222: Implement $attachment->remove_from_db - Patch by Frédéric ↵lpsolit%gmail.com1-9/+1
Buclin <LpSolit@gmail.com> a=LpSolit
2008-01-06Bug 408446: Non-text attachments were mangled by "binmode STDOUT, ':utf8'"mkanat%bugzilla.org1-0/+3
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat
2007-11-30Bug 99215: Attachments have no midair collision protection - Patch by ↵lpsolit%gmail.com1-2/+24
Frédéric Buclin <LpSolit@gmail.com> r=mkanat r=justdave a=justdave
2007-11-15Bug 403824: Replace table locks in most Bugzilla files with transactions - ↵lpsolit%gmail.com1-16/+6
Patch by Emmanuel Seyman <eseyman@linagora.com> r/a=mkanat
2007-11-122nd part of bug 398428: After creating or editing an attachment, immediately ↵lpsolit%gmail.com1-0/+4
display the bug it belongs to - Patch by me, a=LpSolit
2007-10-19Bug 399954: Make Bugzilla able to hold its dependencies in a local directorymkanat%bugzilla.org1-1/+1
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
2007-10-09Midair with product change while adding an attachment silently clears flags ↵lpsolit%gmail.com1-2/+2
- Patch by Tiago R. Mello <timello@gmail.com> r/a=LpSolit
2007-10-08Bug 398739: "Taking a bug" while adding a new attachment locks the bug ↵lpsolit%gmail.com1-37/+20
status forever if the ASSIGNED bug status has been renamed or deleted - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit
2007-10-04Bug 398428: After creating or editing an attachment, immediately display the ↵lpsolit%gmail.com1-5/+14
bug it belongs to - Patch by Frédéric Buclin <LpSolit@gmail.com> r=ghendricks a=LpSolit
2007-08-14Bug 392175: Move isViewable out of attachment.cgi + some other minor cleanup ↵lpsolit%gmail.com1-58/+3
- Patch by Frédéric Buclin <LpSolit@gmail.com>
2007-07-10Bug 365472 rename 'token_inexistent' to 'token_does_not_exist' or somethingtimeless%mozdev.org1-1/+1
r=lpsolit a=lpsolit
2007-04-04Bug 376497: validateID() should return an attachment object - Patch by ↵lpsolit%gmail.com1-163/+74
Frédéric Buclin <LpSolit@gmail.com> a=LpSolit
2007-03-31Bug 376049: Remove validateCanChangeAttachment() from attachment.cgi - Patch ↵lpsolit%gmail.com1-18/+2
by Frédéric Buclin <LpSolit@gmail.com> r/a=LpSolit
2007-01-22Bug 367649: Deleting an attachment should set isobsolete to 1olav%bkor.dhs.org1-2/+4
Patch by Olav Vitters <olav@bkor.dhs.org> r=LpSolit a=LpSolit
2006-11-11Bug 189627: Implement per-product privileges - Patch by Frédéric ↵lpsolit%gmail.com1-21/+11
Buclin <LpSolit@gmail.com> r=mkanat a=myk
2006-10-15Bug 281181: [SECURITY] It's way too easy to delete ↵lpsolit%gmail.com1-2/+2
versions/components/milestones etc... - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
2006-10-15Bug 346086: [SECURITY] attachment.cgi lets you view descriptions of private ↵lpsolit%gmail.com1-59/+43
attachments even when you are not in the insidergroup - Patch by Frédéric Buclin <LpSolit@gmail.com> r=myk a=justdave
2006-09-05Bug 283582: Remove UserInGroup in favor of Bugzilla->user->in_groupmkanat%bugzilla.org1-4/+4
Patch By victory(_RSZ_) <bmo2007@rsz.jp> r=mkanat, a=myk
2006-08-25Bug 343809: Merge FlagType::validate() with Flag::validate() - Patch by ↵lpsolit%gmail.com1-4/+3
Frédéric Buclin <LpSolit@gmail.com> a=myk
2006-08-12Bug 348057: Move the checks for bug visibility out of Bugzilla::Bug->newmkanat%bugzilla.org1-2/+2
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
2006-08-04Bug 343814: Move PatchReader specific code into a separate module - Patch by ↵lpsolit%gmail.com1-261/+27
Frédéric Buclin <LpSolit@gmail.com> a=myk
2006-07-25Bug 343810: Remove Bugzilla::FlagType::get() and implement real flagtype ↵lpsolit%gmail.com1-4/+3
objects - Patch by Frédéric Buclin <LpSolit@gmail.com> a=myk
2006-07-25Bug 174039: Set flags on bug entry - Patch by Frédéric Buclin ↵lpsolit%gmail.com1-84/+6
<LpSolit@gmail.com> r=wurblzap r=myk a=myk
2006-07-06Bug 173629: Clean up "my" variable scoping issues for mod_perlmkanat%bugzilla.org1-3/+7
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
2006-07-04Bug 338375: Use Bugzilla->params everywhere instead of Param().mkanat%bugzilla.org1-1/+1
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
2006-07-04Bug 342869: Use Bugzilla->params everywhere except templatesmkanat%bugzilla.org1-14/+19
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
2006-06-21Bug 282121: Remove globals.pl from scripts that no longer use it - Patch by ↵lpsolit%gmail.com1-10/+8
Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
2006-06-19Bug 339750: Remove Bugzilla::Flag::GetBug - Patch by Frédéric Buclin ↵lpsolit%gmail.com1-33/+30
<LpSolit@gmail.com> r/a=myk
2006-06-18Bug 5179: Need to be able to put attachment on new bug - Patch by Marc ↵lpsolit%gmail.com1-252/+19
Schumann <wurblzap@gmail.com> r=LpSolit a=justdave
2006-06-04Bug 340139: When adding a new attachment, data inserted in the bugs_activity ↵lpsolit%gmail.com1-16/+7
table are quoted - Patch by Frédéric Buclin <LpSolit@gmail.com> r=bkor, r=ghendricks, r=vladd a=justdave
2006-05-17Bug 300549: Eliminate deprecated Bugzilla::DB routines from Flag.pm and ↵lpsolit%gmail.com1-1/+1
FlagType.pm - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=justdave
2006-04-18Bug 44595: Implement an interface for administrators to delete attachments - ↵lpsolit%gmail.com1-0/+83
Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked, justdave a=justdave
2006-04-15Bug 322285: Cancelling a flag should remove it completely from the DB - ↵lpsolit%gmail.com1-4/+2
Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=myk
2006-04-13Bug 303688: Eliminate deprecated Bugzilla::DB routines from attachment.cgi - ↵lpsolit%gmail.com1-151/+171
Patch by Greg Hendricks <ghendricks@novell.com> r=LpSolit a=justdave
2006-04-10Bug 332705: Taking a bug when posting a new attachment doesn't update the ↵lpsolit%gmail.com1-1/+5
'duplicates' table - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=justdave
2006-02-26Bug 284875: Move GetBugLink, GetAttachmentLink, and quoteUrls out of ↵lpsolit%gmail.com1-3/+0
globals.pl - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave