Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Bug 294021: Allow requestees to set attachment flags even if they don't have ↵ | Frédéric Buclin | 2014-03-21 | 1 | -3/+25 |
| | | | | | | editbugs privs r=gerv a=justdave | ||||
* | Bug 913904: (CVE-2013-1734) [SECURITY] CSRF when updating attachments | Frédéric Buclin | 2013-10-16 | 1 | -7/+10 |
| | | | | r=dkl a=sgreen | ||||
* | Bug 811280: Adds a caching mechanism to Bugzilla::Object to avoid querying ↵ | Byron Jones | 2012-11-22 | 1 | -3/+3 |
| | | | | | | the database repeatedly for the same information r=dkl,a=LpSolit | ||||
* | Bug 803600: Clean up the comment generated when deleting attachments | Frédéric Buclin | 2012-10-19 | 1 | -1/+0 |
| | | | | r=justdave a=LpSolit | ||||
* | Bug 787529: Use |use 5.10.1| everywhere | Frédéric Buclin | 2012-09-01 | 1 | -12/+1 |
| | | | | r=wicked a=LpSolit | ||||
* | Bug 771107 - List of attachments in attachment details screen does not ↵ | Dave Lawrence | 2012-07-23 | 1 | -2/+0 |
| | | | | | | distinguish obsolete attachments r=glob, a=LpSolit | ||||
* | Bug 138546: Add a checkbox to add himself to the CC list when creating or ↵ | Reed Loden | 2012-06-26 | 1 | -0/+4 |
| | | | | | | editing an attachment r/a=LpSolit | ||||
* | Bug 671612: Send "X-Content-Type-Options: nosniff" with every response | Matt Selsky | 2012-05-29 | 1 | -2/+1 |
| | | | | r/a=LpSolit | ||||
* | 2nd part of bug 731559: fix get_attachments_by_bug() everywhere | Frédéric Buclin | 2012-03-06 | 1 | -3/+2 |
| | | | | a=LpSolit | ||||
* | Bug 680131: Replace the MPL 1.1 license by the MPL 2.0 one in all files, and ↵ | Frédéric Buclin | 2012-01-11 | 1 | -28/+5 |
| | | | | | | add it to files which miss one r=kiko r=mkanat r=mrbball a=LpSolit | ||||
* | Bug 169752: Activity log should fuse data fields split because they didn't fit | Frédéric Buclin | 2011-12-14 | 1 | -2/+1 |
| | | | | r=glob a=LpSolit | ||||
* | Bug 684225: The removal of locally stored attachments should be done from ↵ | c1541@hotmail.com | 2011-12-08 | 1 | -4/+0 |
| | | | | | | Bugzilla::Attachment->remove_from_db r/a=LpSolit | ||||
* | Bug 703983 - CSRF vulnerability in attachment.cgi allows possible ↵ | Reed Loden | 2011-11-21 | 1 | -28/+5 |
| | | | | | | unauthorized attachment creation [r=LpSolit a=LpSolit] | ||||
* | Bug 682822: Hide 'obsolete attachments' section when there are none to display | Byron Jones | 2011-09-02 | 1 | -30/+41 |
| | | | | r=LpSolit, a=LpSolit | ||||
* | Bug 637981: (CVE-2011-2379) [SECURITY] "Raw Unified" patch diffs can cause ↵ | Byron Jones | 2011-08-04 | 1 | -30/+99 |
| | | | | | | XSS on this domain in IE 6-8 and Safari r/a=LpSolit | ||||
* | Bug 653404: Misleading error message when file to be attached is not ↵ | Frédéric Buclin | 2011-04-28 | 1 | -1/+4 |
| | | | | | | readable by browser r/a=LpSolit | ||||
* | Bug 633776: Automatic charset detection for text attachments | Byron Jones | 2011-03-09 | 1 | -1/+7 |
| | | | | r=mkanat, a=mkanat | ||||
* | Bug 607361: Creating an attachment without a "comment" param in the URL ↵ | Frédéric Buclin | 2010-10-26 | 1 | -1/+2 |
| | | | | | | causes an internal error a=LpSolit | ||||
* | Bug 414509: offer View All (non obsolete) attachments | Guy Pyrzak | 2010-10-02 | 1 | -0/+5 |
| | | | | r=LpSolit, a=LpSolit | ||||
* | Bug 584110: Don't name attachment files "attachment.txt" by default, because ↵ | Frédéric Buclin | 2010-08-04 | 1 | -1/+1 |
| | | | | | | this confuses IE a=LpSolit | ||||
* | Bug 453425 - Send "X-Content-Type-Options: nosniff" header when displaying ↵ | Reed Loden | 2010-08-03 | 1 | -1/+2 |
| | | | | | | attachments so IE8 doesn't try to sniff the content type. [r=LpSolit a=LpSolit] | ||||
* | Bug 119703: Create an attachment by pasting it into a text field | Frédéric Buclin | 2010-07-18 | 1 | -3/+2 |
| | | | | r/a=mkanat | ||||
* | Bug 490930: Always store attachments locally if they are over X size (and ↵ | Frédéric Buclin | 2010-07-08 | 1 | -1/+0 |
| | | | | | | below some threshold!), don't ever display "Big File" checkbox r=mkanat a=LpSolit | ||||
* | Bug 567846: Modify set_status, set_resolution, and set_dup_id to use | Max Kanat-Alexander | 2010-06-03 | 1 | -1/+1 |
| | | | | VALIDATOR_DEPENDENCIES, so that they don't need custom code in set_all. | ||||
* | Bug 565879: Merge ThrowCodeError("action_unrecognized"), ↵ | Frédéric Buclin | 2010-05-20 | 1 | -1/+1 |
| | | | | | | ThrowUserError("no_valid_action") and ThrowCodeError("unknown_action") r=ghendricks a=LpSolit | ||||
* | Bug 560281: Do not display deleted attachments in "View All" | Frédéric Buclin | 2010-05-17 | 1 | -0/+2 |
| | | | | a=LpSolit | ||||
* | Bug 395451 - "Bugzilla::BugMail needs to use Bug objects internally instead ↵ | Reed Loden | 2010-05-06 | 1 | -3/+3 |
| | | | | | | of direct SQL" [r=mkanat a=mkanat] | ||||
* | Bug 560009: Use firstidx from List::MoreUtils instead of lsearch | Max Kanat-Alexander | 2010-04-22 | 1 | -4/+2 |
| | | | | r=timello, a=mkanat | ||||
* | Bug 556429: Stop sending bugmail from inside the template | Max Kanat-Alexander | 2010-04-05 | 1 | -4/+9 |
| | | | | r=LpSolit, a=LpSolit | ||||
* | Bug 365926: Serve attachments without an explicit charset, and let the browser | Max Kanat-Alexander | 2010-03-28 | 1 | -0/+8 |
| | | | | | decide which charset to use r=LpSolit, a=LpSolit | ||||
* | Bug 532518: Credentials are not checked correctly when viewing one ↵ | lpsolit%gmail.com | 2009-12-30 | 1 | -21/+28 |
| | | | | attachment from another bug's alternate host - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit | ||||
* | Bug 162060: Remove the relationship between "votestoconfirm" and whether or ↵ | mkanat%bugzilla.org | 2009-12-17 | 1 | -1/+2 |
| | | | | | | not the UNCONFIRMED status is available, by adding a checkbox to enable the UNCONFIRMED status in editproducts.cgi. Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit | ||||
* | Bug 526734: Allow localization of the "From update of attachment" string in ↵ | mkanat%bugzilla.org | 2009-12-13 | 1 | -7/+5 |
| | | | | | | comments Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit | ||||
* | Bug 452919: Allow the "created an attachment" message in comments to be ↵ | mkanat%bugzilla.org | 2009-12-04 | 1 | -5/+4 |
| | | | | | | localized Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit | ||||
* | Bug 523495: Re-work attachment.cgi and the general attachment_base-checking ↵ | mkanat%bugzilla.org | 2009-10-24 | 1 | -11/+12 |
| | | | | | | code to prevent an infinite redirect loop when ssl_redirect is on and Bugzilla has an attachment_base set. Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit | ||||
* | Bug 509053: Implement Bugzilla->feature (feature_enabled in the templates), ↵ | mkanat%bugzilla.org | 2009-09-30 | 1 | -6/+0 |
| | | | | | | and use it to detect when PatchReader is available. Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit | ||||
* | Bug 328628: When attachments have UTF-8 characters in their name, they will ↵ | mkanat%bugzilla.org | 2009-09-30 | 1 | -0/+7 |
| | | | | | | now be downloaded with the correct name. Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=Wurblzap, a=mkanat | ||||
* | Bug 140999: Users without edit permissions for an attachment should still be ↵ | lpsolit%gmail.com | 2009-09-28 | 1 | -37/+45 |
| | | | | able to make comments - Patch by Frédéric Buclin <LpSolit@gmail.com> a=LpSolit | ||||
* | Bug 509045: Make "use_keywords" a global template variable instead of having ↵ | mkanat%bugzilla.org | 2009-08-11 | 1 | -3/+0 |
| | | | | | | to pass it to templates all the time Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit | ||||
* | Bug 305993: The requestee field may be omitted even when a requestee is ↵ | lpsolit%gmail.com | 2009-08-06 | 1 | -2/+8 |
| | | | | already set - Patch by Frédéric Buclin <LpSolit@gmail.com> a=LpSolit | ||||
* | Bug 415541: Implement $bug->set_flags() and $attachment->set_flags() - Patch ↵ | lpsolit%gmail.com | 2009-08-05 | 1 | -34/+15 |
| | | | | by Frédéric Buclin <LpSolit@gmail.com> a=LpSolit | ||||
* | Bug 486685: MIME type override for attachments lost in HTTP redirect - Patch ↵ | lpsolit%gmail.com | 2009-04-15 | 1 | -0/+4 |
| | | | | by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=LpSolit | ||||
* | Bug 454251: Implement Bugzilla::Attachment->create() and ↵ | lpsolit%gmail.com | 2009-04-09 | 1 | -148/+85 |
| | | | | $attachment->update() - Patch by Frédéric Buclin <LpSolit@gmail.com> a=LpSolit (module owner) | ||||
* | Bug 477420 - "Rename some of the token names used in attachment.cgi" [p=reed ↵ | reed%reedloden.com | 2009-03-31 | 1 | -6/+6 |
| | | | | r=LpSolit a=LpSolit] | ||||
* | Bug 476603 - "[SECURITY] Editing attachments doesn't have any CSRF ↵ | reed%reedloden.com | 2009-03-30 | 1 | -0/+9 |
| | | | | protection" [p=reed r=LpSolit a=LpSolit] | ||||
* | Bug 472206: [SECURITY] Bugzilla should optionally not allow the user to view ↵ | lpsolit%gmail.com | 2009-02-02 | 1 | -1/+3 |
| | | | | possibly harmful attachments - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat r=justdave a=LpSolit | ||||
* | Bug 38862: [SECURITY] attachments should be at a different hostname - Patch ↵ | lpsolit%gmail.com | 2009-02-02 | 1 | -9/+95 |
| | | | | by Byron Jones <bugzilla@glob.com.au> and Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit | ||||
* | Bug 467171: Editing attachments doesn't update the Last-Modified bug ↵ | lpsolit%gmail.com | 2008-12-17 | 1 | -0/+13 |
| | | | | timestamp - Patch by A.A. Shimono <shimono@mozilla.gr.jp> r/a=LpSolit | ||||
* | Bug 452734: Remove the keyword chooser, because it's a usability regression | mkanat%bugzilla.org | 2008-09-18 | 1 | -3/+0 |
| | | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat | ||||
* | Bug 388251: Implement 'new Bugzilla::Attachment' - Patch by Frédéric ↵ | lpsolit%gmail.com | 2008-09-08 | 1 | -5/+4 |
| | | | | Buclin <LpSolit@gmail.com> a=LpSolit |