summaryrefslogtreecommitdiffstats
path: root/show_bug.cgi
AgeCommit message (Collapse)AuthorFilesLines
2013-02-19Bug 842038: (CVE-2013-0785) [SECURITY] XSS in show_bug.cgi when using an ↵Frédéric Buclin1-6/+5
invalid page format r=glob a=LpSolit
2012-11-26Bug 718289: The deadline field should be visible by non-members of the ↵Frédéric Buclin1-1/+1
timetracking group r=dkl a=LpSolit
2012-11-22Bug 811280: Adds a caching mechanism to Bugzilla::Object to avoid querying ↵Byron Jones1-2/+2
the database repeatedly for the same information r=dkl,a=LpSolit
2012-09-20Fix bustageFrédéric Buclin1-1/+2
2012-09-20Bug 450546: Use visible_bugs() where appropriate instead of/in combination ↵Koosha Khajeh Moogahi1-3/+15
with can_see_bug() to improve performance r/a=LpSolit
2012-09-01Bug 787529: Use |use 5.10.1| everywhereFrédéric Buclin1-1/+1
r=wicked a=LpSolit
2012-08-09Bug 756550: Do not link a bug alias with its bug ID for bugs you cannot seeFrédéric Buclin1-12/+12
r=glob a=LpSolit
2012-01-11Bug 680131: Replace the MPL 1.1 license by the MPL 2.0 one in all files, and ↵Frédéric Buclin1-19/+5
add it to files which miss one r=kiko r=mkanat r=mrbball a=LpSolit
2011-08-17Bug 678970: Use $user and $cgi instead of Bugzilla->user and Bugzilla->cgiFrédéric Buclin1-2/+2
r=timello a=LpSolit
2011-01-04Bug 595410: Make it faster to display a bug that has a lot of dependencies.Max Kanat-Alexander1-1/+3
r=LpSolit, a=LpSolit
2009-11-10Bug 505039: Use $user->is_timetracker instead of ↵lpsolit%gmail.com1-1/+1
$user->in_group(Bugzilla->params->{'timetrackinggroup'}) - Patch by XqueZme <xquezme@gmail.com> r/a=LpSolit
2009-10-01Bug 509053: Implement Bugzilla->feature (feature_enabled in the templates), ↵mkanat%bugzilla.org1-6/+0
and use it to detect when PatchReader is available. Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
2009-08-12Bug 509108: Don't require a bug_list parameter to show the bug template ↵mkanat%bugzilla.org1-8/+0
(create the last_bug_list global template parameter) Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
2009-08-11Bug 509045: Make "use_keywords" a global template variable instead of having ↵mkanat%bugzilla.org1-1/+0
to pass it to templates all the time Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
2009-08-05Bug 508416: Bug flags are always displayed in the XML view of bugs - Patch ↵lpsolit%gmail.com1-1/+1
by Frédéric Buclin <LpSolit@gmail.com> r=ghendricks a=LpSolit
2009-02-05 Bug 476678 - Rich clients unable to update bugs need security token ↵ghendricks%novell.com1-1/+1
included in bug xml patch by ghendricks@novell.com r=LpSolit a=LpSolit
2009-01-25Bug 471880: More scripts should use the shadow DB instead of the master DB - ↵lpsolit%gmail.com1-0/+5
Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit
2008-09-18Bug 452734: Remove the keyword chooser, because it's a usability regressionmkanat%bugzilla.org1-1/+0
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat
2008-06-30Bug 440612 – Use Bugzilla::Bug->check everywhere instead of ValidateBugIDmkanat%bugzilla.org1-4/+1
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
2008-05-05Bug 425665: [SECURITY] XSS in show_bug.cgi: id isn't filtered for ↵lpsolit%gmail.com1-1/+1
format=multiple - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat r=wurblzap a=LpSolit
2007-10-19Bug 399954: Make Bugzilla able to hold its dependencies in a local directorymkanat%bugzilla.org1-1/+1
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
2007-05-15Bug 80169: JavaScript-enhanced keyword editing - Patch by Teemu Mannermaa ↵lpsolit%gmail.com1-0/+1
<wicked@etlicon.fi> r=justdave a=LpSolit
2006-12-27Bug 364835 - "current bug number should be filled in in "to bugs" input box ↵reed%reedloden.com1-0/+3
to simplify tagging" [p=reed r=bkor a=justdave]
2006-10-15Bug 346564: [SECURITY] timetracking deadline leaks in XML - Patch by Olav ↵lpsolit%gmail.com1-1/+1
Vitters <bugzilla-mozilla@bkor.dhs.org> r=LpSolit a=justdave
2006-09-05Bug 283582: Remove UserInGroup in favor of Bugzilla->user->in_groupmkanat%bugzilla.org1-1/+1
Patch By victory(_RSZ_) <bmo2007@rsz.jp> r=mkanat, a=myk
2006-08-12Bug 348057: Move the checks for bug visibility out of Bugzilla::Bug->newmkanat%bugzilla.org1-3/+9
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
2006-07-04Bug 338375: Use Bugzilla->params everywhere instead of Param().mkanat%bugzilla.org1-1/+0
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
2006-07-04Bug 342869: Use Bugzilla->params everywhere except templatesmkanat%bugzilla.org1-1/+1
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
2006-06-21Bug 282121: Remove globals.pl from scripts that no longer use it - Patch by ↵lpsolit%gmail.com1-3/+2
Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
2006-06-20Bug 304601: Bugzilla::Config's :locations exports need to be in their own ↵lpsolit%gmail.com1-2/+0
module - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat for the main patch, r=myk for the patch about CGI.pm a=justdave Bug 328637: Remove all legal_* versioncache arrays - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave Bug 110503 - Eliminate versioncache
2006-06-19Bug 341924: When viewing several bugs at once using ↵lpsolit%gmail.com1-2/+6
show_bug.cgi?format=multiple, invalid bugs should generate an error message - Patch by Frédéric Buclin <LpSolit@gmail.com> r=timeless a=myk
2006-05-12Bug 300410: Bugzilla::Auth needs to be restructured to not require a BEGIN blockmkanat%bugzilla.org1-5/+1
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
2006-03-09Bug 328638: Remove @::legal_keywords and %::keywordsbynamemkanat%kerio.com1-1/+2
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
2006-02-21Bug 287325: Ability to add custom plain-text fields to a Bug - Patch by Myk ↵lpsolit%gmail.com1-1/+1
Melez <myk@mozilla.org> r=mkanat a=justdave
2005-10-31Bug 304075: Eliminate use of $::userid from Bugzilla - Patch by Frédéric ↵lpsolit%gmail.com1-4/+2
Buclin <LpSolit@gmail.com> r=wicked a=justdave
2005-10-25Bug 312157: Remove $::template and $::vars from globals.pl - Patch by Olav ↵lpsolit%gmail.com1-1/+3
Vitters <bugzilla-mozilla@bkor.dhs.org> r=LpSolit a=justdave
2005-09-07Bug 302669 (2nd part): show_bug.cgi?ctype=xml should allow the option of ↵lpsolit%gmail.com1-1/+2
exporting attachment data - Patch by Greg Hendricks <ghendricks@novell.com> r/a=myk
2005-08-25Bug 208761: Move GetFormat() from globals.pl into Bugzilla::Template - Patch ↵lpsolit%gmail.com1-2/+2
by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=justdave
2005-08-22Bug 304725: keywords aren't displayed in show_bug.cgi when format=multiple - ↵lpsolit%gmail.com1-0/+1
Patch by Rob Siklos <robzilla@siklos.ca> r=LpSolit a=myk
2005-08-10Bug 301508: Remove CGI.pl - Patch by Frédéric Buclin <LpSolit@gmail.com> ↵lpsolit%gmail.com1-1/+1
r=mkanat,wicked a=justdave
2005-03-16Bug 283581 : Move UserInGroup out of globals.pltravis%sedsystems.ca1-0/+1
Patch by Colin Ogilvie <colin.ogilvie@gmail.com> r=mkanat a=justdave
2004-10-25[SECURITY] Bug 263780: Exporting a bug to XML exposes user comments and ↵justdave%bugzilla.org1-0/+4
attachment summaries which are marked as private to users who are not members of the group allowed to see private comments and attachments. XML export is not exposed in the user interface, but is available to anyone who knows the correct URL to invoke it. This only affects sites that use the 'insidergroup' feature. Patch by Joel Peshkin <bugreport@peshkin.net> r=vladd,justdave, a=justdave
2004-09-22Bug 259452 Add bonsai style &mark support to showbug for bug commentstimeless%mozdev.org1-0/+13
r=kiko a=justdave
2004-04-11Patch for bug 87770: make attachment.cgi work with no parameters; patch by ↵jocuri%softhome.net1-1/+1
GavinS <bugzilla@chimpychompy.org>; r=kiko; a=myk.
2004-04-02Fix for bug 238868: remove %FORM and %COOKIE from show_bug.cgi. Doeskiko%async.com.br1-4/+5
that, swapping them for calls to cgi->param/cookie. r=vladd,justdave; a=justdave.
2004-03-27Fix for bug 234175: Remove deprecated ConnectToDatabase() andkiko%async.com.br1-4/+3
quietly_check_login()/confirm_login() calls. Cleans up callsites (consisting of most of our CGIs), swapping (where appropriate) for calls to Bugzilla->login. Patch by Teemu Mannermaa <wicked@etlicon.fi>. r=bbaetz, kiko. a=justdave.
2004-03-18Bug 192516: Moving the loose .pm files into the Bugzilla directory, where ↵justdave%syndicomm.com1-4/+4
they belong. These files pre-date the Bugzilla directory, and would have gone there had it existed at the time. The four files in question were copied on the CVS server to preserve CVS history in the files. This checkin deletes them from the old location and modifies everything else to know where they are now. r= myk, gerv a= justdave
2003-08-20Check for PatchReader as a part of the installation and disable the "Diff"jkeiser%netscape.com1-0/+6
links if it is not there (bug 215268)
2003-05-05Bug 201816 - use CGI.pm for header outputbbaetz%acm.org1-3/+8
r=joel, a=justdave
2003-03-27Bug 196433 - Bugzilla now uses /usr/bin/perl as the shebang linejake%bugzilla.org1-1/+1
r=justdave a=justdave