aboutsummaryrefslogtreecommitdiffstats
path: root/Bugzilla/Config
Commit message (Collapse)AuthorAgeFilesLines
* Bug 1079065: [SECURITY] Always use the 3 arguments form for open() to ↵Gervase Markham2015-01-211-1/+1
| | | | | | prevent shell code injection r=dkl,a=glob
* Bug 399068: Remove the docs_urlbase parameter. r=LpSolit, a=glob.Gervase Markham2014-12-221-7/+0
|
* Bug 978615 - remove URL to unavailable webdot server. r,a=globGervase Markham2014-11-191-1/+1
|
* Revert "Bug 1073264 - allow attachment download to be offloaded to the ↵Gervase Markham2014-10-241-8/+0
| | | | | | webserver using X-SendFile or equivalent. r=gerv, a=glob." Morning brain thought this bug was approved for 5.0. This reverts commit 55e8faeed19ff618483cb5803847bdba6c80c752.
* Bug 1073264 - allow attachment download to be offloaded to the webserver ↵Damien Nozay2014-10-241-0/+8
| | | | using X-SendFile or equivalent. r=gerv, a=glob.
* Bug 1083737: Validate the smtpserver parameterFrédéric Buclin2014-10-212-2/+32
| | | | r=dkl a=glob
* Bug 1068494: Remove CVS/Bonsai/LXR-specific bits of Patch ViewerFrédéric Buclin2014-10-161-53/+0
| | | | r=gerv a=glob
* Bug 502625: Replace Email::Send with Email::SenderFrédéric Buclin2014-09-201-10/+1
| | | | r=dylan a=glob
* Bug 1009013 - Require a user to change their password if they log in and ↵Simon Green2014-09-111-1/+8
| | | | | | their current password does not meet the password complexity rules r=glob, a=sgreen
* Bug 996893: Perl 5.18 and newer throw tons of warnings about deprecated modulesFrédéric Buclin2014-08-1319-0/+19
| | | | r=dkl a=sgreen
* Bug 811855 - Make the check for sslbase parameter report a failure reason. ↵Matt Selsky2014-05-021-1/+1
| | | | r=gerv, a=glob.
* Bug 489028 - Record last-visited time of bugs when logged inDylan William Hardison2014-04-221-0/+7
| | | | r=glob a=justdave
* Bug 399087 - Remove the 'mostfreqthreshold' parameterSunil Joshi [:SunilJoshi]2014-03-211-7/+0
| | | | r=dkl,a=justdave
* Bug 237498: Add memcached integrationByron Jones2013-12-191-0/+32
| | | | r=dkl, a=sgreen
* Bug 452525 - Allow the option of "OR" groups ("any of the groups" instead of ↵Simon Green2013-12-181-0/+6
| | | | | "all of the groups") r=gerv, a=sgreen
* Bug 793963: add the ability to tag comments with arbitrary tagsByron Jones2013-11-253-2/+31
| | | | r=dkl, a=glob
* Bug 287682: UTF-8 characters are incorrectly displayed in New Charts and ↵Frédéric Buclin2013-11-062-2/+25
| | | | | | graphical reports r=wurblzap a=sgreen
* Bug 824399: (CVE-2013-0786) [SECURITY] build_subselect() leaks the existence ↵Simon Green2013-02-191-0/+8
| | | | | | of products and components you cannot access r/a=LpSolit
* Bug 826678: Disable warnings about the deprecated Return::Value module when ↵Frédéric Buclin2013-01-061-0/+6
| | | | | | loading Email::Send r=wicked a=LpSolit
* Bug 415658: Allow apostrophes in email addressesHugo Seabrook2013-01-021-1/+1
| | | | r/a=LpSolit
* Bug 787668: Use |use parent| instead of |use base|Matt Selsky2012-12-011-1/+1
| | | | r/a=LpSolit
* Bug 816747 - Add dummy POD for unPODded methods.Marc Schumann2012-11-301-0/+50
| | | | r/a=LpSolit
* Bug 577329 - WebServices should filter email addresses same as the web UI as ↵Dave Lawrence2012-10-161-0/+6
| | | | | | users are not always required to login r/a=LpSolit
* Bug 787529: Use |use 5.10.1| everywhereFrédéric Buclin2012-09-0118-0/+21
| | | | r=wicked a=LpSolit
* Bug 728639: (CVE-2012-0465) [SECURITY] User lockout policy can be bypassed ↵Frédéric Buclin2012-04-182-2/+12
| | | | | | by altering the X-FORWARDED-FOR header r=glob a=LpSolit
* Bug 680131: Replace the MPL 1.1 license by the MPL 2.0 one in all files, and ↵Frédéric Buclin2012-01-1118-513/+90
| | | | | | add it to files which miss one r=kiko r=mkanat r=mrbball a=LpSolit
* Bug 399080: Remove the 'usebugaliases' parameter (turned on permanently)Matt Selsky2011-12-261-6/+0
| | | | r/a=LpSolit
* Bug 255606: Do not let buglist.cgi return all bugs by defaultFrédéric Buclin2011-11-261-1/+1
| | | | r/a=mkanat
* Bug 685552 - Email auto-completion causes server to thrashDavid Lawrence2011-10-241-0/+6
| | | | r/a=mkanat
* Bug 466419: Add SSL support for SMTPFrédéric Buclin2011-08-162-1/+15
| | | | r/a=mkanat
* revert accidental property changesByron Jones2011-03-092-0/+0
|
* Bug 633776: Automatic charset detection for text attachmentsByron Jones2011-03-092-0/+0
| | | | r=mkanat, a=mkanat
* Bug 632718: Only return 500 search results unless the user specificallyMax Kanat-Alexander2011-03-021-0/+7
| | | | | requests to see more. r=dkl, a=mkanat
* Bug 632717: Limit the total number of results that a search can ever return.Max Kanat-Alexander2011-02-191-2/+8
| | | | r=mkanat, a=mkanat (module owner)
* Add missing documentation. r=mkanat.Gervase Markham2011-01-271-1/+3
| | | https://bugzilla.mozilla.org/show_bug.cgi?id=629321
* Bug 558803: Add a parameter to specify the password complexity for new passwordsrojanu2011-01-071-0/+9
| | | | r/a=LpSolit
* Bug 611979: Undefined subroutine &Bugzilla::Config::Advanced::check_multi ↵Frédéric Buclin2010-11-141-0/+2
| | | | | | when enabling strict_transport_security r=glob a=LpSolit
* Bug 600475 - Support the 'includeSubDomains' flag as an option for the ↵Reed Loden2010-09-291-2/+4
| | | | | | 'Strict-Transport-Security' advanced option in order to protect subdomains. [r=glob a=mkanat]
* Bug 594990: Make the Strict-Transport-Security HTTP header only be sentMax Kanat-Alexander2010-09-271-0/+6
| | | | | if a particular parameter is enabled. r=glob, a=mkanat
* Bug 119703: Create an attachment by pasting it into a text fieldFrédéric Buclin2010-07-181-5/+0
| | | | r/a=mkanat
* Bug 486292: Change the default workflow to UNCONFIRMED, CONFIRMED,Max Kanat-Alexander2010-07-051-2/+2
| | | | | IN_PROGRESS, RESOLVED, VERIFIED. r=LpSolit, a=mkanat
* Bug 556422: Move the existing bug-moving functionality into an extensionMax Kanat-Alexander2010-06-181-93/+0
| | | | | called OldBugMove. r=dkl, a=mkanat
* Bug 450301: What Simplify searching UI, initial improvements to the advanced ↵Guy Pyrzak2010-06-061-1/+1
| | | | | | search ui. r=mkanat, a=mkanat
* Bug 561362: Remove the 'sendmailnow' parameterFrédéric Buclin2010-04-231-6/+0
| | | | r=justdave a=LpSolit
* Bug 560009: Use firstidx from List::MoreUtils instead of lsearchMax Kanat-Alexander2010-04-221-5/+5
| | | | r=timello, a=mkanat
* Bug 557806: When setting the upgrade_notification parameter, an error should ↵Frédéric Buclin2010-04-071-1/+6
| | | | | | be thrown if you don't have all the required Perl modules installed r=glob a=LpSolit
* Bug 372979: Make voting into an extensionMax Kanat-Alexander2010-02-151-6/+0
| | | | r=mkanat, a=mkanat, a=LpSolit
* Bug 537846 - "Disable the "Reset" checkbox for the maintainer parameter" ↵Reed Loden2010-02-091-0/+1
| | | | [r=mkanat a=mkanat]
* Fix the data in the bzr repo to match the data in the CVS repo.Max Kanat-Alexander2010-02-011-72/+0
| | | | | | | During the CVS imports into Bzr, there were some inconsistencies introduced (mostly that files that were deleted in CVS weren't being deleted in Bzr). So this checkin makes the bzr repo actually consistent with the CVS repo, including fixing permissions of files.
* Bug 527586: Use X-Forwarded-For instead of REMOTE_ADDR for trusted proxiesmkanat%bugzilla.org2009-12-311-0/+6
| | | | Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat