aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Bug 933353 - UNCONFIRMED hardcoded in product list.Marc Schumann2013-11-041-1/+2
| | | | r=LpSolit; a=glob
* Bug 926952: Possible race conditions when editing or deleting a milestone or ↵Frédéric Buclin2013-11-042-3/+14
| | | | | | a version r/a=glob
* Bug 933736 - names are no longer links in html bugmail with background ↵Dave Lawrence2013-11-041-2/+2
| | | | | | bugmail generation r/a=glob
* Bug 933274 - Uncaught bugword in ↵Marc Schumann2013-11-041-1/+1
| | | | | | template/en/default/admin/params/auth.html.tmpl. r=dkl; a=sgreen
* Bug 927497 - "Add me to CC list" feature of bug creation screen gives token ↵Dave Lawrence2013-10-291-10/+18
| | | | | | error r=LpSolit,a=glob
* Bug 863745: Enable multi-select fields in reportsPami Ketolainen2013-10-295-36/+87
| | | | r=LpSolit a=glob
* Bug 930870: With Pod::Coverage 0.23, t/011pod.t fails if a module is not ↵Frédéric Buclin2013-10-281-2/+2
| | | | | | installed r/a=glob
* Bug 919314: Do not list the target milestone in bugmail headers when ↵Sunil Joshi2013-10-281-0/+2
| | | | | | usetargetmilestone is off r=LpSolit a=glob
* Bug 929575: t/001compile.t fails if Test::Taint is not installedFrédéric Buclin2013-10-281-1/+2
| | | | r=dkl a=glob
* Bug 928410 - Bug.get should return detail about cc list members similar to ↵Dave Lawrence2013-10-281-0/+6
| | | | | | assigned_to, creator and qa_contact r=gerv,a=glob
* Bug 928092: Add OS detection for Windows 8.1Frédéric Buclin2013-10-251-0/+1
| | | | r=justdave a=glob
* Bug 930013: fall back to the bug's current delta_ts when validating a token ↵Byron Jones2013-10-241-1/+1
| | | | | | if one is not provided to process_bug.cgi r=dkl,a=glob
* Bug 926232 - CSS style ".bz_status_UNCONFIRMED" is not applied due to typo.Andre Klapper2013-10-211-1/+1
| | | | r=Wurblzap; a=glob
* Bump version post-releaseDave Lawrence2013-10-171-1/+1
|
* Bug 927736: "invalid token" error if someone else changes the CC list while ↵Byron Jones2013-10-171-2/+2
| | | | | | viewing a bug r/a=LpSolit
* Bug 927570: mid-air conflict fails to check all changed fieldsByron Jones2013-10-171-2/+4
| | | | r=dkl, a=simon
* Bump version to 4.5.1Dave Lawrence2013-10-162-4/+4
|
* Bug 924932: (CVE-2013-1743) [SECURITY] Field values are not escaped ↵Frédéric Buclin2013-10-161-14/+24
| | | | | | correctly in tabular reports r=dkl a=glob
* Bug 924802: (CVE-2013-1742) [SECURITY] (XSS) "id" and "sortkey" are not ↵Frédéric Buclin2013-10-162-5/+3
| | | | | | sanitized when editing flag types if categoryAction-foo is set r=dkl a=glob
* Bug 913904: (CVE-2013-1734) [SECURITY] CSRF when updating attachmentsFrédéric Buclin2013-10-161-7/+10
| | | | r=dkl a=sgreen
* Bug 911593: (CVE-2013-1733) [SECURITY] CSRF in process_bug.cgiFrédéric Buclin2013-10-161-11/+12
| | | | r=dkl a=sgreen
* Bug 907438 - In MySQL, login cookie checking is not case-sensitive, reducing ↵Dave Lawrence2013-10-161-3/+3
| | | | | | total entropy and allowing easier brute force r=LpSolit,a=sgreen
* Bug 906745 - In MySQL, tokens are not case-sensitive, reducing total entropy ↵Dave Lawrence2013-10-162-5/+20
| | | | | | and allowing easier brute force r=LpSolit,a=glob
* Bug 912641: Release notes for Bugzilla 4.4.1Frédéric Buclin2013-10-161-2/+45
| | | | r=dkl a=LpSolit
* Bug 917370: large dependency trees are very slow to loadByron Jones2013-10-151-43/+66
| | | | r=dkl, a=simon
* Bug 340160: Speed up LogActivityEntry()Frédéric Buclin2013-10-141-5/+6
| | | | r=dkl a=glob
* Backout 1st part of bug 340160: state $sth doesn't work fine with mod_perlFrédéric Buclin2013-10-141-6/+5
|
* Fixes on checkin for bug 769134Frédéric Buclin2013-10-112-11/+8
|
* Bug 916254 - Bug.get should include the name for reporter, assigned_to and ↵Frank Becker2013-10-111-0/+57
| | | | | | qa_contact r=dkl,a=sgreen
* Bug 919852 - Add ability to perform quicksearch using Bug.searchDave Lawrence2013-10-012-37/+53
| | | | r/a=glob
* Bug 864625 - Setting a non-privileged user as a requestee on a secure bug ↵Dave Lawrence2013-09-291-6/+14
| | | | | | while ccing the same user to give access at the same r=LpSolit,a=sgreen
* Bug 891311: Text in the "My Requests" page is misleading about how the ↵Frédéric Buclin2013-09-282-34/+36
| | | | | | AND/OR radio button works r=dkl a=justdave
* Bug 798927: An error should be thrown when passing an illegal pronounImran Chaudhry2013-09-282-1/+9
| | | | r=LpSolit a=justdave
* Bug 340160: Speed up LogActivityEntry()Frédéric Buclin2013-09-282-14/+10
| | | | r=dkl a=justdave
* Bug 851267: Bugzilla times out when a user has several thousands of votesFrédéric Buclin2013-09-283-96/+93
| | | | r=dkl a=justdave
* Bug 917483 - Bug.update_attachment causes error when updating filename using ↵Dave Lawrence2013-09-261-6/+19
| | | | key 'file_name'
* Bug 784072 (2nd part): Exclude extensions from POD coverage checksFrédéric Buclin2013-09-261-0/+2
|
* fix bustage due to bug 891236: it doesn't pass t/002goodperl.tFrédéric Buclin2013-09-261-1/+3
|
* Bug 920787: The "Flags:" label in bug reports is badly alignedFrédéric Buclin2013-09-262-8/+2
| | | | r=dkl a=sgreen
* Bug 917669 - invalid or expired authentication tokens and cookies should ↵Dave Lawrence2013-09-265-14/+41
| | | | | | throw errors, not be silently ignored r/a=glob
* Bug 893589 - 004template.t fails when templates in extension directorySimon Green2013-09-263-14/+26
| | | r=dkl, a=simon
* Bug 769134 - Bugzilla unintentionally removes groups when changing products ↵Simon Green2013-09-262-13/+62
| | | | | with multiple bugs r=dkl, a=justdave
* Bug 714523 - editversions.cgi should use ->set_allSunil Joshi2013-09-262-7/+9
| | | r=simon, a=simon
* Bug 621216 - Don't call GetQuip() if the user doesn't want quipsSunil Joshi2013-09-261-1/+4
| | | r=simon, a=simon
* Bug 455301: Don't show password box on userprefs.cgi if your auth method ↵Dirk Steinmetz2013-09-251-15/+19
| | | | | | didn't use DB passwords r=LpSolit a=justdave
* Temporary fix for bug 916882: whitelist product and component when used with ↵Frédéric Buclin2013-09-241-1/+4
| | | | | | the changed* operators r/a=glob
* Bug 919475: [Oracle] Crash when non-mandatory free text custom fields are ↵Jiří Netolický2013-09-231-0/+4
| | | | | | left empty on bug creation r=LpSolit a=justdave
* Bug 918647: "Use of uninitialized value" warnings when using quicksearchByron Jones2013-09-231-1/+5
| | | | r=simon, a=glob
* Bug 918362 - The "order" parameter passed to Bug.search is ignoredDave Lawrence2013-09-201-4/+4
| | | | r=LpSolit,a=glob
* Bug 897510 - Create and Modify User Screen must also contain password rules ↵Sunil Joshi2013-09-191-1/+8
| | | | | as hint r=simon, a=glob