aboutsummaryrefslogtreecommitdiffstats
path: root/Bugzilla
Commit message (Collapse)AuthorAgeFilesLines
* Bug 1031035: xmlrpc can be DoS'd with billion laughs attackByron Jones2015-04-131-0/+8
| | | | r=LpSolit,a=glob
* Bug 1152319: calling /rest/logout results in an internal error and a ↵David Lawrence2015-04-101-0/+10
| | | | | | malformed response to the caller r=glob,a=glob
* Bug 1138417: sql_group_concat() generates bad SQL code with PostgreSQL 8.xSimon Green2015-04-091-51/+86
| | | | r=LpSolit a=glob
* Bug 1143874: Improve load time of bug commentsFrédéric Buclin2015-04-052-14/+21
| | | | r=dkl a=sgreen
* Bug 1143871: Correctly preload bug data when viewing a bugFrédéric Buclin2015-04-052-55/+77
| | | | r=dkl a=sgreen
* Bug 1143867: Optimize set_comment_is_private() and isopened()Frédéric Buclin2015-04-051-17/+25
| | | | r=dkl a=sgreen
* Bug 1145438: DB Crash under postgres when using alias column in buglist.cgiMatt Tyson2015-03-231-1/+1
| | | | (fix ordering)
* Bug 1145459: SQL error under postgres when using 'blocks' column in buglist.cgiMatt Tyson2015-03-201-1/+1
| | | | r=glob,a=glob
* Bug 1145438: DB Crash under postgres when using alias column in buglist.cgiMatt Tyson2015-03-201-0/+1
| | | | r=glob,a=glob
* Bug 880282: Replace |FILTER no_break| by |class="nowrap"| to prevent dashes ↵Frédéric Buclin2015-03-111-8/+0
| | | | | | (U+002D) from being replaced by non-breaking hyphens/dashes (U+2011) r=dkl a=justdave
* Bug 1138463: mod_perl does not support Apache 2.4 directivesFrédéric Buclin2015-03-111-9/+50
| | | | r=dkl a=glob
* Bug.update_attachment returns 'attachments', not 'attachment'Frédéric Buclin2015-03-071-1/+1
|
* Bug 1128853: Bugzilla shouldn't try to write API tokens into the shadow DBByron Jones2015-03-051-0/+5
| | | | r=dkl,a=glob
* Bug 1061271: Add a hook into ↵Frédéric Buclin2015-02-262-0/+22
| | | | | | Bugzilla::User::check_and_send_account_creation_confirmation() r=gerv a=glob
* Bug 1134743: javascript filter should escape uncode line and paragraph ↵Byron Jones2015-02-241-0/+2
| | | | | | separators (causes "Unterminated string literal" javascript error) r=dylan,a=glob
* Bug 1133690: .htaccess incorrectly assumes that Apache 2.2.x can read new ↵Frédéric Buclin2015-02-201-17/+17
| | | | | | 2.4 directives r=dkl a=glob
* Bug 1088086: Possible duplicate search doesn't return any results if you ↵Byron Jones2015-02-201-7/+11
| | | | | | input "a->b" (for any a/b) r=dylan,a=glob
* Bug 1112181: Relative dates in the future involving months are incorrectly ↵Frédéric Buclin2015-02-171-2/+3
| | | | | | converted r=dylan a=glob
* Bug 1131404: checksetup.pl should check if mod_rewrite and mod_version are ↵Frédéric Buclin2015-02-111-1/+3
| | | | | | enabled r=dkl a=glob
* Bug 1121477: Support for Apache HTTPD 2.4Jochen Wiedmann2015-02-021-11/+93
| | | | r=dkl,a=glob
* Bug 1128245 - upgrading from v4.4.6 to v5.0rc2 fails on connection problem ↵Dylan William Hardison2015-02-021-1/+3
| | | | with MySQL
* Bump version post-releaseDavid Lawrence2015-01-271-1/+1
|
* Bump version to 5.0rc2David Lawrence2015-01-271-1/+1
|
* Bug 1124716: regression caused by bug 1090275 to whitelist webservice ↵David Lawrence2015-01-231-1/+1
| | | | | | methods causes test failures with t/012throwables.t r=dylan,a=glob
* Bump version post-releaseDavid Lawrence2015-01-211-1/+1
|
* Bumped version to 5.0rc1David Lawrence2015-01-211-1/+1
|
* Bug 1090275: WebServices modules should maintain a whitelist of methods that ↵David Lawrence2015-01-2112-0/+95
| | | | | | are allowed instead of allowing access to any function imported into its namespace r=dylan,a=glob
* Bug 1079065: [SECURITY] Always use the 3 arguments form for open() to ↵Gervase Markham2015-01-215-7/+7
| | | | | | prevent shell code injection r=dkl,a=glob
* Bug 1107549 - split extension docs into User and Admin docs. r=dkl, a=glob.Gervase Markham2015-01-071-0/+15
|
* Bug 1113147: Revert the hack from bug 1108809 and blacklist SOAP::Lite 1.12Frédéric Buclin2015-01-072-7/+2
| | | | r=dkl a=glob
* Bug 1098291: OPTION response for CORS requests to REST doesn't allow ↵David Lawrence2014-12-221-1/+1
| | | | | | X-Requested-With r=glob,a=glob
* Bug 399068: Remove the docs_urlbase parameter. r=LpSolit, a=glob.Gervase Markham2014-12-222-11/+32
|
* Bug 1108809: SOAP::Lite 1.12 causes error when using XMLRPC APIDavid Lawrence2014-12-181-0/+7
| | | | r=glob,a=glob
* Bug 1111043: Bug.add_comment returns the wrong comment IDFrédéric Buclin2014-12-171-12/+3
| | | | r/a=dkl
* Bug 1082106 - avoid problem where ->bz_add_columns creates a foreign key ↵David Lawrence2014-12-111-3/+6
| | | | constraint causing failure in checksetup.pl when it tries to re-add it later. r,a=glob
* Bug 1095244: DB crash when adding an alias that differs only in case from an ↵David Lawrence2014-12-081-2/+13
| | | | | | existing alias r=glob,a=glob
* Bug 1038275: Comprehensible documentation for the REST APIDavid Lawrence2014-11-261-0/+8
| | | | r=gerv,a=glob
* Revert "Bug 317021 - improve description of bz_canusewhine* parameters. r=gerv."Gervase Markham2014-11-252-15/+2
| | | | This reverts commit 5d8aa524eff6409055d4d967d2857ede40be4cad.
* Bug 317021 - improve description of bz_canusewhine* parameters. r=gerv.Matt Selsky2014-11-242-2/+15
|
* Bug 1101151: OS sniffing should detect Windows 10 from "Windows NT 6.4" ↵David Lawrence2014-11-201-0/+1
| | | | | | instead of detecting Windows NT r=LpSolit,a=glob
* Bug 978615 - remove URL to unavailable webdot server. r,a=globGervase Markham2014-11-191-1/+1
|
* Bug 1100368: css concatenation breaks data: urlsByron Jones2014-11-181-1/+3
| | | | r=dylan,a=glob
* Bug 1095758: Fix use of uninitialized value $hostname in Mailer.pmKoosha KM2014-11-121-1/+1
| | | | r=dkl,a=glob
* Bug 1001462: Bug.search causes error when using simple token auth and ↵David Lawrence2014-11-123-19/+28
| | | | | | specifying 'token' instead of 'Bugzilla_token' r=glob,a=glob
* Bug 1094858: Create hook in Bugzilla::WebService::Constants to allow ↵Byron Jones2014-11-111-0/+1
| | | | | | overrriding of standard status codes by extensions (fix broken POD)
* Bug 1093600: REST shouldn't support multiple instances of parameters for ↵David Lawrence2014-11-101-12/+24
| | | | | | resources which only support a single params (eg. POST bug/comment) r=glob,a=glob
* Bug 1094858: Create hook in Bugzilla::WebService::Constants to allow ↵David Lawrence2014-11-102-20/+48
| | | | | | overrriding of standard status codes by extensions r=gerv,a=glob
* Bug 1093928: Remove the longdescs.is_markdown DB columnDavid Lawrence2014-11-101-0/+3
| | | | r=LpSolit,a=glob
* Revert Bug 330707 - Add optional support for MarkDownDavid Lawrence2014-11-0412-718/+26
|
* Bug 1088253: GET REST calls should allow arbitrary URL parameters to be ↵David Lawrence2014-10-292-12/+26
| | | | | | passed in addition the values in the path r=glob,a=glob