aboutsummaryrefslogtreecommitdiffstats
path: root/Bugzilla/WebService/Server
Commit message (Collapse)AuthorAgeFilesLines
* Bug 1124716: regression caused by bug 1090275 to whitelist webservice ↵David Lawrence2015-01-231-1/+1
| | | | | | methods causes test failures with t/012throwables.t r=dylan,a=glob
* Bug 1090275: WebServices modules should maintain a whitelist of methods that ↵David Lawrence2015-01-212-0/+17
| | | | | | are allowed instead of allowing access to any function imported into its namespace r=dylan,a=glob
* Bug 1113147: Revert the hack from bug 1108809 and blacklist SOAP::Lite 1.12Frédéric Buclin2015-01-071-7/+0
| | | | r=dkl a=glob
* Bug 1098291: OPTION response for CORS requests to REST doesn't allow ↵David Lawrence2014-12-221-1/+1
| | | | | | X-Requested-With r=glob,a=glob
* Bug 1108809: SOAP::Lite 1.12 causes error when using XMLRPC APIDavid Lawrence2014-12-181-0/+7
| | | | r=glob,a=glob
* Bug 1001462: Bug.search causes error when using simple token auth and ↵David Lawrence2014-11-121-0/+7
| | | | | | specifying 'token' instead of 'Bugzilla_token' r=glob,a=glob
* Bug 1093600: REST shouldn't support multiple instances of parameters for ↵David Lawrence2014-11-101-12/+24
| | | | | | resources which only support a single params (eg. POST bug/comment) r=glob,a=glob
* Bug 1088253: GET REST calls should allow arbitrary URL parameters to be ↵David Lawrence2014-10-292-12/+26
| | | | | | passed in addition the values in the path r=glob,a=glob
* Bug 996893: Perl 5.18 and newer throw tons of warnings about deprecated modulesFrédéric Buclin2014-08-1311-0/+14
| | | | r=dkl a=sgreen
* Bug 419568 - Web Service module to create a componentSimon Green2014-08-122-0/+48
| | | | r=dkl, a=sgreen
* Bug 1036213 - (CVE-2014-1546) add '/**/' before jsonrpc.cgi callback to ↵Reed Loden2014-07-241-1/+3
| | | | | | avoid swf content type sniff vulnerability r=glob,a=sgreen
* Bug 1036225: Return a link to the REST documentation in "method not found" ↵David Lawrence2014-07-101-0/+1
| | | | | | errors r=glob,a=glob
* Bug 1014345 - Add Group.get RPC callSimon Green2014-07-021-0/+3
| | | | r=glob, a=glob
* Bug 1023725 - Rename Bug.flag_types webservice call to FlagType.getSimon Green2014-06-193-19/+18
| | | | r=glob, a=glob
* Bug 1008764: Add a web service to create and update Flag typesSimon Green2014-05-221-0/+56
| | | | r=glob, a=justdave
* Backout of Bug 1001462 - Bug.search causes error when using simple token ↵David Lawrence2014-05-121-6/+0
| | | | auth and specifying 'token' instead of 'Bugzilla_token'
* Bug 1001462 - Bug.search causes error when using simple token auth and ↵David Lawrence2014-05-121-0/+6
| | | | | | specifying 'token' instead of 'Bugzilla_token' r/a=glob
* Don't call Bugzilla.pm from a Perl module itself (see bug 866927)Frédéric Buclin2014-04-241-1/+0
|
* Fix some syntax errors left by bug 489028Frédéric Buclin2014-04-241-1/+1
|
* Bug 489028 - Record last-visited time of bugs when logged inDylan William Hardison2014-04-222-0/+53
| | | | r=glob a=justdave
* Bug 995238 - Incomplete implementation of bug 540818 causes ↵David Lawrence2014-04-151-9/+0
| | | | | | include_fields=_all to not work as expected r/a=justdave
* Bug 972881 - Add hooks to Bugzilla/WebService/Server/REST.pm to allow for ↵Dave Lawrence2014-02-251-3/+12
| | | | | | extensions to extend and alter REST data r=glob,a=justdave
* Bug 966277 - Bugzilla native REST API should default to application/json if ↵Dave Lawrence2014-02-051-1/+7
| | | | | | no Accept header was set r=dkl,a=justdave
* Bug 958057 - REST API - No example of non-rewrite endpoint in POD docs, no ↵Dave Lawrence2014-01-091-5/+15
| | | | | | config directions for how to create rewrite r/a=justdave
* Bug 756048 - Add and update bug and attachment flags using the WebService API Dave Lawrence2013-12-311-1/+17
| | | | r=sgreen,a=justdave
* Bug 793963: add the ability to tag comments with arbitrary tagsByron Jones2013-11-251-0/+16
| | | | r=dkl, a=glob
* Bug 916935 - Add Access-Control-Allow-Headers to REST API to indicate which ↵Dave Lawrence2013-09-171-0/+1
| | | | | | HTTP headers can be used when making the request r/a=glob
* Bug 914986 - Create Bug.update_attachment to update attachments via RPC/RESTSimon Green2013-09-131-0/+6
| | | r=dkl, a=sgreen
* Bug 893195 - Allow token based authentication for webservicesDave Lawrence2013-08-263-17/+37
| | | | r=glob,a=sgreen
* Bug 908338 - Create a new webservice called User.valid_login that will ↵Dave Lawrence2013-08-261-0/+5
| | | | | | verify if a cookie or login token is valid for the current user r=glob,a=sgreen
* Bug 907245 - Allow for URL params to also be passed with POST/PUT REST API ↵Dave Lawrence2013-08-211-0/+11
| | | | | | requests r/a=glob
* Bug 569177 - Add support for eTag for WebServicesDave Lawrence2013-08-093-8/+52
| | | | r/a=glob
* Fix wrong links in REST PODFrédéric Buclin2013-08-033-3/+3
|
* Bug 897003: Improve _strip_undefs() performanceFrédéric Buclin2013-07-291-8/+9
| | | | r/a=sgreen
* Bug 896066 - Allow REST WebService API to for GET /product to allow ↵Dave Lawrence2013-07-231-9/+16
| | | | | | retrieval of multiple product objects r/a=glob
* Bug 787328 - xmlrpc.cgi doesn't send any security-related headers Dave Lawrence2013-07-141-2/+10
| | | | r=glob,a=justdave
* Bug 866927 - Enhance Bugzilla WebServices to allow data access using RESTDave Lawrence2013-07-127-0/+1083
| | | | r=glob,a=justdave
* Bug 787668: Use |use parent| instead of |use base|Matt Selsky2012-12-011-2/+2
| | | | r/a=LpSolit
* Bug 816747 - Add dummy POD for unPODded methods.Marc Schumann2012-11-302-0/+34
| | | | r/a=LpSolit
* Bug 577329 - WebServices should filter email addresses same as the web UI as ↵Dave Lawrence2012-10-162-1/+11
| | | | | | users are not always required to login r/a=LpSolit
* Bug 787529: Use |use 5.10.1| everywhereFrédéric Buclin2012-09-012-1/+14
| | | | r=wicked a=LpSolit
* Bug 731219: Fix XMLRPC breakage when content-type contains a charsetByron Jones2012-02-291-1/+4
| | | | r=dkl, a=LpSolit
* Bug 725663 - (CVE-2012-0453) [SECURITY] CSRF vulnerability in the XML-RPC ↵Dave Lawrence2012-02-221-0/+8
| | | | | | API when using mod_perl r/a=LpSolit
* Bug 724464 - JSON-RPC support shouldn't require SOAP::LiteDave Lawrence2012-02-151-0/+14
| | | | r/a=LpSolit
* Bug 718319: (CVE-2012-0440) [SECURITY] JSON-RPC permits to bypass token ↵Frédéric Buclin2012-01-311-1/+13
| | | | | | checks and can lead to CSRF (no victim's action required) r=mkanat a=LpSolit
* Bug 680131: Replace the MPL 1.1 license by the MPL 2.0 one in all files, and ↵Frédéric Buclin2012-01-112-37/+10
| | | | | | add it to files which miss one r=kiko r=mkanat r=mrbball a=LpSolit
* Bug 706753: Bugzilla will not work with newest version of JSON::RPC 1.01 due ↵Frédéric Buclin2012-01-051-1/+12
| | | | | | to non-backward compatibility r=dkl r=mkanat a=LpSolit
* Bug 600810: Use XMLRPC::Transport::HTTP:Apache as base class under mod_perlTeemu Mannermaa2011-07-201-1/+5
| | | | r/a=mkanat
* Bug 609538: Make the JSON-RPC interface support UTF-8 when a recent versionMax Kanat-Alexander2011-02-141-1/+16
| | | | | of LWP is installed r=dkl, a=mkanat
* Bug 617030 - Add an error code for json_rpc_invalid_callback, and fix theMax Kanat-Alexander2010-12-061-1/+1
| | | | | | regex used by _bz_callback in Bugzilla::WebService::Server::JSONRPC to accept numbers other than 0 or 1. r=LpSolit, a=mkanat