summaryrefslogtreecommitdiffstats
path: root/buglist.cgi
AgeCommit message (Collapse)AuthorFilesLines
2013-02-19Bug 824399: (CVE-2013-0786) [SECURITY] build_subselect() leaks the existence ↵Simon Green1-1/+4
of products and components you cannot access r/a=LpSolit
2013-01-16Bug 819432: Execute queries in two steps to improve performanceFrédéric Buclin1-21/+21
r=dkl a=LpSolit
2013-01-02Bug 413851 - add CSV output option to request lists. r=LpSolit.Gervase Markham1-20/+11
2012-11-26Bug 718289: The deadline field should be visible by non-members of the ↵Frédéric Buclin1-5/+3
timetracking group r=dkl a=LpSolit
2012-09-17Bug 761046: Don't redirect when hitting buglist.cgi directly to avoid ↵Byron Jones1-1/+0
duplicate cgi->header calls r=LpSolit, a=LpSolit
2012-09-01Bug 787529: Use |use 5.10.1| everywhereFrédéric Buclin1-6/+1
r=wicked a=LpSolit
2012-08-29Bug 786310: Remove tokens when saving the default queryByron Jones1-0/+2
r= LpSolit, a=LpSolit
2012-08-28Bug 772953: Remove the token from buglist urlsByron Jones1-1/+2
r=dkl, a=LpSolit
2012-08-20Bug 698068: The "There is no saved search named ..." page has a "forget" linkFrédéric Buclin1-1/+1
r=glob a=LpSolit
2012-06-27Bug 768870: The "Un-forget the search" link has no tokenFrédéric Buclin1-1/+3
r=glob a=LpSolit
2012-06-07Bug 760978: Remove support for Internet Explorer 5 on MacFrédéric Buclin1-8/+4
r=timello a=LpSolit
2012-06-03Bug 297553: Enable serverpush for OperaMatt Selsky1-1/+2
r/a=LpSolit
2012-05-29Bug 754672 - CSRF vulnerability in buglist.cgi allows possible unauthorized ↵Reed Loden1-0/+2
setting of default search options [r=LpSolit a=LpSolit]
2012-05-07Bug 616191: Implement UI to easily tag bugs from the bug report directly ↵Frédéric Buclin1-44/+9
(and get rid of the current form in the footer) r=timello a=LpSolit
2012-04-24Bug 745751: Remove support for microsummariesMatt Selsky1-11/+3
r/a=LpSolit
2012-04-18Bug 745397: (CVE-2012-0466) [SECURITY] The JS template for buglists permits ↵Frédéric Buclin1-10/+0
attackers to access all bugs that the victim can see r=glob a=LpSolit
2012-04-17Bug 745320: Shared queries do not work when tags are part of the queryFrédéric Buclin1-4/+9
r=dkl a=LpSolit
2012-03-22Bug 732440: Add SQL execution timings to buglist.cgi's debug outputByron Jones1-0/+3
r=LpSolit, r=LpSolit
2012-02-27Bug 730670: Do not redirect in buglist.cgi to improve performanceFrédéric Buclin1-2/+3
r=glob a=LpSolit
2012-01-11Bug 680131: Replace the MPL 1.1 license by the MPL 2.0 one in all files, and ↵Frédéric Buclin1-24/+5
add it to files which miss one r=kiko r=mkanat r=mrbball a=LpSolit
2011-12-09Bug 644281: When the sort order of a buglist is modified, the "Show next bug ↵Frédéric Buclin1-18/+13
in my list" user pref still uses the original sort order to decide which bug to display next r=glob a=LpSolit
2011-11-30Bug 297382: Move sort order validation from buglist.cgi to Bugzilla::SearchTeemu Mannermaa1-42/+22
r/a=mkanat
2011-11-26Bug 255606: Do not let buglist.cgi return all bugs by defaultFrédéric Buclin1-1/+1
r/a=mkanat
2011-08-17Bug 678357: Fix 'limit' parameter in the saved searches resultsTiago Mello1-1/+1
r/a=mkanat
2011-08-17Bug 678970: Use $user and $cgi instead of Bugzilla->user and Bugzilla->cgiFrédéric Buclin1-8/+8
r=timello a=LpSolit
2011-05-31Bug 647649: Change the old "Boolean Charts" UI into the new AND/ORMax Kanat-Alexander1-13/+0
"Custom Search" UI. r=timello, a=mkanat
2011-03-02Bug 632718: Only return 500 search results unless the user specificallyMax Kanat-Alexander1-0/+11
requests to see more. r=dkl, a=mkanat
2011-02-14Bug 480044: Use dashes instead of colons to separate bug IDs in the BUGLIST ↵Frédéric Buclin1-1/+1
cookie, because colons are HTML-escaped, making the cookie bigger than the 4k limit r=mkanat a=LpSolit
2011-02-14Bug 417551: Make it possible for CSV headers to be the field descriptionMichael J Tosh1-0/+4
instead of the field name, and have the buglist.cgi link give you CSV like this by default. r=mkanat, a=mkanat
2011-02-12Bug 535571: Allow Search.pm to accept "limit" and "offset" as parameters.Max Kanat-Alexander1-12/+4
r=mkanat, a=mkanat (module owner)
2011-01-30Bug 616185: Move tags (aka lists of bugs) to their own DB tablesFrédéric Buclin1-90/+35
r/a=mkanat
2011-01-07Bug 621090 - [SECURITY] Adding saved searches lacks CSRF protectionDavid Lawrence1-0/+2
r/a=mkanat
2010-12-27Bug 615574: Make every search done by buglist.cgi create a list_id, so thatMax Kanat-Alexander1-23/+1
even Saved Searches get "last list" support. r=LpSolit, a=LpSolit
2010-08-31Bug 77193 - Add the ability to retire (disable) old versions, components and ↵Dave Lawrence1-4/+4
milestones r/a=mkanat
2010-08-02Bug 581622: When a quicksearch includes the "content" field, it is limited ↵Frédéric Buclin1-1/+0
to 200 bugs r/a=mkanat
2010-07-16Bug 398308: Make Search.pm take a hashref for its "params" argumentMax Kanat-Alexander1-1/+1
instead of taking a CGI object. r=mkanat, a=mkanat (module owner)
2010-07-15Bug 577800: Finish the cleanup of Search.pm's "init" function by removingMax Kanat-Alexander1-1/+1
it and having its work be done by a new "sql" accessor instead. Also adds some comments, moves functions around into sections, and creates a new _user accessor. r=mkanat, a=mkanat (module owner)
2010-06-16Bug 24896: Make the First/Last/Prev/Next navigation on bugs work withMax Kanat-Alexander1-33/+40
multiple buglists at once r=glob, a=mkanat
2010-05-20Bug 565879: Merge ThrowCodeError("action_unrecognized"), ↵Frédéric Buclin1-1/+1
ThrowUserError("no_valid_action") and ThrowCodeError("unknown_action") r=ghendricks a=LpSolit
2010-05-12Bug 486050: Bugzilla should prefill quicksearch box when showing search ↵David Lawrence1-0/+3
results from a quicksearch r/a=mkanat
2010-04-22Bug 560009: Use firstidx from List::MoreUtils instead of lsearchMax Kanat-Alexander1-7/+7
r=timello, a=mkanat
2010-03-03Bug 513989 - large search query causing internal server error (500) but ↵Dave Lawrence1-3/+5
valid redirect 302 returned r=mkanat, a=mkanat
2010-03-02Bug 286041 - Allow people to undo "forget search"Kent Rogers1-5/+4
r=mkanat, a=mkanat
2010-02-28Bug 537834 - "Buglist results using atom ctype do not display users with ↵Reed Loden1-0/+2
empty real names" [r=LpSolit a=LpSolit]
2010-02-16Bug 372979: Make voting into an extensionMax Kanat-Alexander1-18/+0
r=mkanat, a=mkanat, a=LpSolit
2010-01-06Bug 535675: Typing +foo in the QuickSearch box throws an "uninitialized ↵lpsolit%gmail.com1-1/+3
value" warning (missing 'order' parameter) - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=LpSolit
2009-11-10Bug 505039: Use $user->is_timetracker instead of ↵lpsolit%gmail.com1-1/+1
$user->in_group(Bugzilla->params->{'timetrackinggroup'}) - Patch by XqueZme <xquezme@gmail.com> r/a=LpSolit
2009-11-03Bug 526271: Uninitialized value in can_enter_product() due to a missing ↵lpsolit%gmail.com1-1/+1
argument - Patch by Frédéric Buclin <LpSolit@gmail.com> r=ghendricks a=LpSolit
2009-10-29Bug 524234: When there are no search results, include helpful linksmkanat%bugzilla.org1-16/+29
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
2009-10-26Bug 524395: Boolean charts And, Or, "add another chart" buttons do no work ↵lpsolit%gmail.com1-12/+13
with JS turned off - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat