aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Bug 1137307: Bug reports are not valid HTML5 pagesFrédéric Buclin2015-04-135-59/+75
| | | | r=dkl a=glob
* Bug 1031035: xmlrpc can be DoS'd with billion laughs attackByron Jones2015-04-132-0/+11
| | | | r=LpSolit,a=glob
* Use hardcoded "bugzilla" in the DTD, see bug 770073Frédéric Buclin2015-04-111-2/+2
|
* Fix the Bugzilla DTD to allow multiple bug aliases, see bug 1012506Frédéric Buclin2015-04-111-1/+1
|
* Bug 1135398: Release notes for 5.0 miss some important changesFrédéric Buclin2015-04-101-3/+17
| | | | r/a=dkl
* Bug 1152319: calling /rest/logout results in an internal error and a ↵David Lawrence2015-04-101-0/+10
| | | | | | malformed response to the caller r=glob,a=glob
* Bug 1138417: sql_group_concat() generates bad SQL code with PostgreSQL 8.xSimon Green2015-04-091-51/+86
| | | | r=LpSolit a=glob
* Bug 1151637: Buttons at the bottom of buglists lack an IDFrédéric Buclin2015-04-071-5/+5
| | | | r/a=dkl
* Bug 1143874: Improve load time of bug commentsFrédéric Buclin2015-04-053-23/+31
| | | | r=dkl a=sgreen
* Bug 1143871: Correctly preload bug data when viewing a bugFrédéric Buclin2015-04-053-55/+81
| | | | r=dkl a=sgreen
* Bug 1143867: Optimize set_comment_is_private() and isopened()Frédéric Buclin2015-04-051-17/+25
| | | | r=dkl a=sgreen
* Bug 1143864: Replace |FILTER bug_link| in loops by direct calls to ↵Frédéric Buclin2015-04-053-15/+17
| | | | | | bug/link.html.tmpl to improve performance r=dkl a=sgreen
* Bug 1128194: Remove 'umask 0' from post_bug.cgiFrédéric Buclin2015-04-051-2/+0
| | | | r=dkl a=sgreen
* Bug 1121788: Buttons in buglist don't work in IEByron Jones2015-03-312-14/+22
| | | | r=lpsolit,a=sgreen
* Bug 1145438: DB Crash under postgres when using alias column in buglist.cgiMatt Tyson2015-03-231-1/+1
| | | | (fix ordering)
* Bug 1145459: SQL error under postgres when using 'blocks' column in buglist.cgiMatt Tyson2015-03-201-1/+1
| | | | r=glob,a=glob
* Bug 1145438: DB Crash under postgres when using alias column in buglist.cgiMatt Tyson2015-03-201-0/+1
| | | | r=glob,a=glob
* Bug 1137669: 003safesys.t doesn't test any file due to a missing -T argument ↵Frédéric Buclin2015-03-162-5/+15
| | | | | | (and broken syntax in Support::Systemexec) r=dylan a=glob
* Bug 880282: Replace |FILTER no_break| by |class="nowrap"| to prevent dashes ↵Frédéric Buclin2015-03-118-19/+12
| | | | | | (U+002D) from being replaced by non-breaking hyphens/dashes (U+2011) r=dkl a=justdave
* Bug 1138463: mod_perl does not support Apache 2.4 directivesFrédéric Buclin2015-03-112-10/+56
| | | | r=dkl a=glob
* Bug.update_attachment returns 'attachments', not 'attachment'Frédéric Buclin2015-03-071-1/+1
|
* Remove references to MarkdownFrédéric Buclin2015-03-071-1/+0
|
* Bug 1107310 - Mention max_allowed_packet in mysqldump section. r=LpSolit, a=globGervase Markham2015-03-051-4/+4
|
* Bug 1128853: Bugzilla shouldn't try to write API tokens into the shadow DBByron Jones2015-03-0514-1/+30
| | | | r=dkl,a=glob
* Bug 1138754: span.quote styling makes the scroll bar difficult to accessAlbert Ting2015-03-041-1/+0
| | | | r=glob,a=glob
* (TaskCluster) Allow retrieval of the selenium.log for Selenium testsDavid Lawrence2015-03-031-0/+10
|
* Bug 1118930: validateEnterBug() doesn't work when attachments are disabledAlbert Ting2015-02-261-1/+1
| | | | r=LpSolit a=glob
* Bug 1061271: Add a hook into ↵Frédéric Buclin2015-02-263-1/+43
| | | | | | Bugzilla::User::check_and_send_account_creation_confirmation() r=gerv a=glob
* Intial checking of taskgraph.json for TaskCluster CIDavid Lawrence2015-02-241-0/+228
|
* Bug 1134743: javascript filter should escape uncode line and paragraph ↵Byron Jones2015-02-241-0/+2
| | | | | | separators (causes "Unterminated string literal" javascript error) r=dylan,a=glob
* Fix colspan (bug 554964)Frédéric Buclin2015-02-221-1/+1
|
* Change a label in relnotesFrédéric Buclin2015-02-211-3/+3
|
* Bug 1133690: .htaccess incorrectly assumes that Apache 2.2.x can read new ↵Frédéric Buclin2015-02-202-19/+19
| | | | | | 2.4 directives r=dkl a=glob
* Bug 1088086: Possible duplicate search doesn't return any results if you ↵Byron Jones2015-02-201-7/+11
| | | | | | input "a->b" (for any a/b) r=dylan,a=glob
* Bug 1134736: urlbase must be HTML-filtered in rest.html.tmplFrédéric Buclin2015-02-191-1/+1
| | | | r/a=dkl
* Bug 1132887: When starting a sudo session, the password is not validatedFrédéric Buclin2015-02-171-0/+3
| | | | r=dkl a=glob
* Bug 1112181: Relative dates in the future involving months are incorrectly ↵Frédéric Buclin2015-02-171-2/+3
| | | | | | converted r=dylan a=glob
* Bug 1132862 - Update README; add LICENSE file. r,a=globGervase Markham2015-02-172-92/+427
|
* - Force use of PostgreSQL 9.1David Lawrence2015-02-161-1/+9
| | | | | - Configure DB users in travis.yml - Re-enable Pg selenium testing to see if problems continue
* Bug 1131404: checksetup.pl should check if mod_rewrite and mod_version are ↵Frédéric Buclin2015-02-112-7/+12
| | | | | | enabled r=dkl a=glob
* Bug 1121477: Support for Apache HTTPD 2.4Jochen Wiedmann2015-02-022-12/+104
| | | | r=dkl,a=glob
* Bug 1128245 - upgrading from v4.4.6 to v5.0rc2 fails on connection problem ↵Dylan William Hardison2015-02-021-1/+3
| | | | with MySQL
* Bump version post-releaseDavid Lawrence2015-01-271-1/+1
|
* Bump version to 5.0rc2David Lawrence2015-01-271-1/+1
|
* Bug 1124716: regression caused by bug 1090275 to whitelist webservice ↵David Lawrence2015-01-231-1/+1
| | | | | | methods causes test failures with t/012throwables.t r=dylan,a=glob
* Bug 1116614: checksetup "use lib" called too late. r=gerv, a=glob.Albert Ting2015-01-221-2/+3
|
* Bump version post-releaseDavid Lawrence2015-01-211-1/+1
|
* Bumped version to 5.0rc1David Lawrence2015-01-211-1/+1
|
* Bug 1090275: WebServices modules should maintain a whitelist of methods that ↵David Lawrence2015-01-2113-0/+100
| | | | | | are allowed instead of allowing access to any function imported into its namespace r=dylan,a=glob
* Bug 1079065: [SECURITY] Always use the 3 arguments form for open() to ↵Gervase Markham2015-01-2110-16/+16
| | | | | | prevent shell code injection r=dkl,a=glob