aboutsummaryrefslogtreecommitdiffstats
path: root/Bugzilla/CGI.pm
Commit message (Collapse)AuthorAgeFilesLines
* Bug 629326: Make it simpler to check ETagsMax Kanat-Alexander2011-12-261-0/+20
| | | | r/a=LpSolit
* Bug 680771 - Send X-XSS-Protection header for XSS prevention/blockingReed Loden2011-11-211-0/+4
| | | | [r=mkanat a=LpSolit]
* Bug 647649: Change the old "Boolean Charts" UI into the new AND/ORMax Kanat-Alexander2011-05-311-3/+12
| | | | | "Custom Search" UI. r=timello, a=mkanat
* Bug 655847: Accessing buglist.cgi throws: Use of inherited AUTOLOAD for ↵Frédéric Buclin2011-05-291-9/+1
| | | | | | non-method Bugzilla::CGI::SERVER_PUSH() is deprecated at Bugzilla/CGI.pm line 233 r/a=mkanat
* Bug 652625 - Empty queries still get run because the list_id parameter is ↵David Lawrence2013-05-031-1/+3
| | | | | | added to them r/a=mkanat
* Bug 637977: Re-setup CGI.pm global variables on every request under mod_perl,Max Kanat-Alexander2011-03-131-13/+24
| | | | | | which prevents CGI.pm from generating URLs with semicolons in them instead of ampersands. r=glob, a=mkanat
* Remove unused variable, per my review commentFrédéric Buclin2010-12-281-1/+0
| | | https://bugzilla.mozilla.org/show_bug.cgi?id=615574
* Bug 615574: Make every search done by buglist.cgi create a list_id, so thatMax Kanat-Alexander2010-12-271-0/+49
| | | | | even Saved Searches get "last list" support. r=LpSolit, a=LpSolit
* Bug 475894 - Send the 'X-Frame-Options: SAMEORIGIN' header to help protect ↵Reed Loden2010-12-181-0/+6
| | | | | | against clickjacking. [r=mkanat a=mkanat]
* Bug 607138: Don't send the Strict-Transport-Security header for theMax Kanat-Alexander2010-12-061-2/+6
| | | | | attachment_base. r=LpSolit, a=LpSolit
* Bug 600464: (CVE-2010-3172) [SECURITY] Content/Header injection due to ↵Byron Jones2010-11-031-1/+2
| | | | | | non-random multipart/x-mixed-replace boundary r=mkanat a=LpSolit
* Bug 607966: Use of qw(...) as parentheses is deprecated since Perl 5.13.5Frédéric Buclin2010-10-281-3/+1
| | | | r=gerv a=LpSolit
* Bug 600475 - Support the 'includeSubDomains' flag as an option for the ↵Reed Loden2010-09-291-2/+6
| | | | | | 'Strict-Transport-Security' advanced option in order to protect subdomains. [r=glob a=mkanat]
* Bug 594990: Make the Strict-Transport-Security HTTP header only be sentMax Kanat-Alexander2010-09-271-2/+2
| | | | | if a particular parameter is enabled. r=glob, a=mkanat
* Bug 398308: Make Search.pm take a hashref for its "params" argumentMax Kanat-Alexander2010-07-151-12/+0
| | | | | instead of taking a CGI object. r=mkanat, a=mkanat (module owner)
* Bug 521416: Some web servers fail to set the QUERY_STRING parameterbyron jones (glob)2010-07-151-0/+3
| | | | r/a=mkanat
* Bug 575097 - "New STS header in Bugzilla::CGI causes malformed header error ↵Reed Loden2010-06-271-5/+6
| | | | | | due to lack of Content-Type naming" [r=LpSolit a=LpSolit]
* Bug 562475 - "Bugzilla should use strict-transport-security (STS) headers"Reed Loden2010-06-251-0/+6
| | | | [r=mkanat a=mkanat]
* Bug 574166: Make clean_search_url take into account the new email3 fieldsMax Kanat-Alexander2010-06-241-1/+1
| | | | | from query.cgi r=glob, a=mkanat
* Bug 24896: Make the First/Last/Prev/Next navigation on bugs work withMax Kanat-Alexander2010-06-151-0/+4
| | | | | multiple buglists at once r=glob, a=mkanat
* Bug 561296: A fix allowing updating a field value's name when it isMax Kanat-Alexander2010-05-141-0/+8
| | | | | the default value r=LpSolit, a=LpSolit
* Bug 560009: Use firstidx from List::MoreUtils instead of lsearchMax Kanat-Alexander2010-04-221-1/+1
| | | | r=timello, a=mkanat
* Bug 537746: Search criteria headers on buglist duplicate unnecessarily when ↵Frédéric Buclin2010-02-011-3/+12
| | | | | | bugidtype is in use Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat
* Bug 509030: "Changes older than" in Advanced Search is sometimes ignored - ↵lpsolit%gmail.com2010-01-121-1/+2
| | | | Patch by Frédéric Buclin <LpSolit@gmail.com> r=gerv a=LpSolit
* Bug 525734: Allow WebService clients to authenticate using Bugzilla_login ↵mkanat%bugzilla.org2009-11-091-0/+33
| | | | | | and Bugzilla_password Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
* Bug 523495: Re-work attachment.cgi and the general attachment_base-checking ↵mkanat%bugzilla.org2009-10-241-9/+27
| | | | | | code to prevent an infinite redirect loop when ssl_redirect is on and Bugzilla has an attachment_base set. Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
* Bug 514913: Eliminate ssl="authenticated sessions"mkanat%bugzilla.org2009-10-091-21/+22
| | | | Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
* Bug 224588: Unify ($^O =~ /MSWin/) checks (always use ON_WINDOWS)mkanat%bugzilla.org2009-09-041-8/+7
| | | | Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
* Bug 502641: Fix various problems that would occur when you would log in from ↵mkanat%bugzilla.org2009-07-071-1/+15
| | | | | | buglist.cgi Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
* Bug 502498: Use of uninitialized value in string eq at Bugzilla/CGI.pm line ↵lpsolit%gmail.com2009-07-051-1/+3
| | | | 289 - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat
* Bug 501538: Make $cgi->param() also check GET variables during a POST, so ↵mkanat%bugzilla.org2009-07-041-6/+17
| | | | | | that POST forms with query-string variables in the target (like the login form) work correctly. Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
* Bug 432907: Create a JSON frontend for WebServicesmkanat%bugzilla.org2009-03-311-2/+2
| | | | Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
* Bug 38862: [SECURITY] attachments should be at a different hostname - Patch ↵lpsolit%gmail.com2009-02-021-0/+24
| | | | by Byron Jones <bugzilla@glob.com.au> and Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit
* Bug 431744: "Change Columns" URL contained more than 3x the characters in ↵mkanat%bugzilla.org2009-01-201-0/+4
| | | | | | the base buglist.cgi URL Patch By Michael J Tosh <michael.j.tosh@lmco.com> r=mkanat, a=mkanat
* Bug 454892: Improve Bugzilla::CGI::clean_search_url to remove all the normal ↵mkanat%bugzilla.org2008-09-171-2/+41
| | | | | | "default" fields Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
* Bug 428659 – Setting SSL param to 'authenticated sessions' only ↵dkl%redhat.com2008-08-181-22/+19
| | | | | | | protects logins and param doesn't protect WebService calls at all Patch by David Lawrence <dkl@redhat.com> - r/a=LpSolit/mkanat
* Backing out these patches as they cause a regression. More informationdkl%redhat.com2008-07-291-19/+15
| | | | | | | | | | | in the respective bug reports. Bug 428659 – Setting SSL param to 'authenticated sessions' only protects logins and param doesn't protect WebService calls at all Patch by Dave Lawrence <dkl@redhat.com> - r/a=mkanat Bug 445104: ssl redirects come with a 200 OK HTTP code on mod_perl Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
* Bug 445104: ssl redirects come with a 200 OK HTTP code on mod_perlmkanat%bugzilla.org2008-07-241-1/+5
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
* Bug 428659 – Setting SSL param to 'authenticated sessions' only ↵dkl%redhat.com2008-07-101-15/+15
| | | | | | protects logins and param doesn't protect WebService calls at all Patch by Dave Lawrence <dkl@redhat.com> - r/a=mkanat
* Bug 414002: Temporary files for uploaded attachments are not deleted on ↵lpsolit%gmail.com2008-01-301-1/+4
| | | | Windows - Patch by Steve Hay <SteveHay@planit.com> r/a=LpSolit
* Bug 407420: CGI::Carp fatalsToBrowser should happen as early as possiblemkanat%bugzilla.org2008-01-061-7/+0
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=justdave, a=mkanat
* Bug 363153: Turn on the utf8 bit on all strings in Bugzilla that containmkanat%bugzilla.org2007-11-231-0/+21
| | | | | | non-ASCII data, if the utf8 parameter is on. This means that string functions like substr() work properly on multi-byte languages, now. Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=wurblzap, a=mkanat
* Bug 345970 Avoid using the string 'the web'timeless%mozdev.org2007-07-241-1/+1
| | | | | patch by jhulten@tragicallyleet.com r=timeless I've updated it to trunk r=lpsolit a=lpsolit
* Bug 383745: Incorrect charset specification in "please wait" screen when ↵wurblzap%gmail.com2007-06-221-3/+3
| | | | | | | server push is in use. Patch by Marc Schumann <wurblzap@gmail.com>, r=mkanat, a=mkanat
* Bug 360028: Bugzilla::Search::Saved should have create() and update(), and ↵mkanat%bugzilla.org2006-11-131-0/+25
| | | | | | buglist.cgi should use it Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 357526: buglist.cgi doesn't specify encoding as UTF-8 when the rest of ↵mkanat%bugzilla.org2006-11-011-1/+13
| | | | | | Bugzilla does Patch By John Beranek <john@redux.org.uk> r=mkanat, a=justdave
* Bug 349764: Errors print out a whole HTML page, even when we're not in ↵mkanat%bugzilla.org2006-09-061-4/+7
| | | | | | USAGE_MODE_BROWSER Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=kevin.benton, a=myk
* Bug 173897: Fix |XXX - mod_perl| commentsmkanat%bugzilla.org2006-07-281-7/+0
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
* Bug 300978: bad output when a non-cgi script diesmkanat%bugzilla.org2006-07-261-1/+5
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
* Bug 342757: searching results in "YOUR BROWSER DOESN'T SUPPORT THIS ↵mkanat%bugzilla.org2006-07-121-10/+16
| | | | | | SERVER-PUSH TECHNOLOGY" warning on brower under mod_perl Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=justdave, a=justdave
generated by cgit v1.2.1 (git 2.21.0) at 2024-06-27 06:59:46 +0000