Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Fix bustage | Frédéric Buclin | 2012-02-22 | 1 | -1/+1 | |
| | ||||||
* | Bug 725663 - (CVE-2012-0453) [SECURITY] CSRF vulnerability in the XML-RPC ↵ | Dave Lawrence | 2012-02-22 | 1 | -0/+5 | |
| | | | | | | API when using mod_perl r/a=LpSolit | |||||
* | Bug 722580: Move 'ReviewBoard' and 'Rietveld' BugUrl sub-classes | Tiago Mello | 2012-02-19 | 1 | -2/+1 | |
| | | | | | to a new 'MoreBugUrl' extension. r/a=LpSolit | |||||
* | Bug 718319: (CVE-2012-0440) [SECURITY] JSON-RPC permits to bypass token ↵ | Frédéric Buclin | 2012-01-31 | 1 | -0/+5 | |
| | | | | | | checks and can lead to CSRF (no victim's action required) r=mkanat a=LpSolit | |||||
* | Bug 617802: Add see also support for Rietveld installations on appspot.com | Matt Selsky | 2012-01-25 | 1 | -0/+1 | |
| | | | | r=timello, a=LpSolit | |||||
* | Bug 319953: Missing real email syntax check | Frédéric Buclin | 2012-01-23 | 2 | -5/+3 | |
| | | | | r=glob a=LpSolit | |||||
* | Bug 718397: New extensions should be created using the MPL 2.0 license | Matt Selsky | 2012-01-20 | 1 | -2/+1 | |
| | | | | r/a=LpSolit | |||||
* | Bug 680131: Replace the MPL 1.1 license by the MPL 2.0 one in all files, and ↵ | Frédéric Buclin | 2012-01-11 | 31 | -522/+155 | |
| | | | | | | add it to files which miss one r=kiko r=mkanat r=mrbball a=LpSolit | |||||
* | Bug 716283: Clickjacking in the attachment "Details" page allows to bypass ↵ | Frédéric Buclin | 2012-01-10 | 1 | -0/+3 | |
| | | | | | | token checks r=dkl a=LpSolit | |||||
* | Bug 661533: The See Also field should support Review Board URLs | Matt Selsky | 2012-01-06 | 1 | -0/+1 | |
| | | | | r=timello a=LpSolit | |||||
* | Bug 714664: The content of the "emailregexpdesc" parameter is not escaped ↵ | Frédéric Buclin | 2012-01-06 | 2 | -2/+2 | |
| | | | | | | when displayed to the user r=dkl a=LpSolit | |||||
* | Bug 399080: Remove the 'usebugaliases' parameter (turned on permanently) | Matt Selsky | 2011-12-26 | 1 | -3/+1 | |
| | | | | r/a=LpSolit | |||||
* | Bug 301656: Adds a preference to CC flag requestees to bugs | Byron Jones | 2011-12-01 | 1 | -0/+1 | |
| | | | | r=LpSolit, a=LpSolit | |||||
* | Bug 255606: Do not let buglist.cgi return all bugs by default | Frédéric Buclin | 2011-11-26 | 1 | -0/+4 | |
| | | | | r/a=mkanat | |||||
* | Fix missing-space bugs in error messages. a=LpSolit. | Gervase Markham | 2011-11-01 | 3 | -6/+6 | |
| | | | https://bugzilla.mozilla.org/show_bug.cgi?id=698737 | |||||
* | Bug 685552 - Email auto-completion causes server to thrash | David Lawrence | 2011-10-24 | 1 | -2/+2 | |
| | | | | r/a=mkanat | |||||
* | Bug 696256: global/variables.none.tmpl should be PRE_PROCESS'ed | Frédéric Buclin | 2011-10-23 | 11 | -50/+1 | |
| | | | | r/a=mkanat | |||||
* | Bug 582529: Ambiguous error message "You did not specify a file to attach" ↵ | Frédéric Buclin | 2011-10-01 | 1 | -0/+4 | |
| | | | | | | when deleting an existing attachment filename a=LpSolit | |||||
* | Bug 637648 - Rename the "tags" table to "tag" | Stephanie Daugherty | 2011-08-29 | 1 | -1/+1 | |
| | | | | r=LpSolit, a=LpSolit | |||||
* | Bug 661476: sanitycheck.pl should check if all products have components defined. | Frédéric Buclin | 2011-08-17 | 2 | -3/+11 | |
| | | | | | Also, creating a new product from the web UI asks you to create a component too. r=glob a=LpSolit | |||||
* | Bug 678844: When trying to edit a non-existent classification, the error ↵ | Frédéric Buclin | 2011-08-16 | 1 | -2/+4 | |
| | | | | | | message has missing words r=glob a=LpSolit | |||||
* | Bug 677187: If the attachment filename contains a newline, an error is ↵ | Frédéric Buclin | 2011-08-10 | 1 | -2/+3 | |
| | | | | | | thrown when trying to download the attachment r/a=mkanat | |||||
* | Bug 585440 - Allow disabled accounts to turn off all bugmail | David Lawrence | 2011-08-09 | 1 | -0/+3 | |
| | | | | r/a=mkanat | |||||
* | Bug 622203 - Allow filing closed bugs via the WebService | Max Kanat-Alexander | 2011-08-09 | 1 | -4/+9 | |
| | | | | r=dkl, a=mkanat | |||||
* | Bug 660691: Allow Bugzilla to parse HTML-only inbound email via email_in.pl | Max Kanat-Alexander | 2011-08-09 | 1 | -3/+2 | |
| | | | | r=glob, a=mkanat | |||||
* | Bug 437076: Allow email_in to accept multipart/alternative HTML email with | Max Kanat-Alexander | 2011-08-09 | 1 | -2/+2 | |
| | | | | | attachments r=glob, a=mkanat | |||||
* | Bug 288049: "internal error" from ThrowCodeError is confusing. Reword it | Frédéric Buclin | 2011-08-07 | 1 | -5/+7 | |
| | | | | r=justdave a=LpSolit | |||||
* | Bug 637981: (CVE-2011-2379) [SECURITY] "Raw Unified" patch diffs can cause ↵ | Byron Jones | 2011-08-04 | 1 | -0/+5 | |
| | | | | | | XSS on this domain in IE 6-8 and Safari r/a=LpSolit | |||||
* | Bug 653477: (CVE-2011-2380) [SECURITY] Group names can be guessed when ↵ | Frédéric Buclin | 2011-08-04 | 1 | -20/+8 | |
| | | | | | | creating or editing a bug r=mkanat a=LpSolit | |||||
* | Bug 676237: The traceback in code-error.html.tmpl is displayed on a single line | Frédéric Buclin | 2011-08-04 | 1 | -1/+1 | |
| | | | | r=glob a=LpSolit | |||||
* | Bug 634812: Having a very large number of custom fields can make displaying ↵ | Frédéric Buclin | 2011-08-01 | 1 | -1/+3 | |
| | | | | | | show_bug.cgi slow r=glob a=LpSolit | |||||
* | Bug 674574: When all components or versions are disabled, you cannot enter ↵ | Frédéric Buclin | 2011-08-01 | 1 | -2/+2 | |
| | | | | | | bugs into the product but it's listed in enter_bug.cgi anyway r=dkl a=LpSolit | |||||
* | Bug 674089: Add a new hook 'end_object_name' in user-error.html.tmpl template | Tiago Mello | 2011-07-25 | 1 | -0/+1 | |
| | | | | r/a=mkanat | |||||
* | Bug 674117: Add a new hook 'auth_failure_object' in user-error.html.tmpl ↵ | Tiago Mello | 2011-07-25 | 1 | -0/+2 | |
| | | | | | | template r/a=mkanat | |||||
* | Bug 642388: Description of field days_elapsed missing from ↵ | Frédéric Buclin | 2011-07-25 | 1 | -0/+1 | |
| | | | | | | global/field-descs.none.tmpl r=wurblzap a=LpSolit | |||||
* | Bug 589128: Adds a preference allowing users to choose between text or html | Byron Jones | 2011-07-25 | 1 | -0/+3 | |
| | | | | | for bugmail. r=LpSolit, a=LpSolit | |||||
* | Bug 658929 - User autocomplete is very slow when there are lots of users in ↵ | David Lawrence | 2011-07-05 | 1 | -0/+2 | |
| | | | | | | the profiles table r/a=mkanat | |||||
* | Revert wrong indentation, see bug 652427 | Frédéric Buclin | 2011-07-01 | 1 | -1/+1 | |
| | ||||||
* | Bug 652427: Going back to the new bug page loses the description if possible ↵ | Guy Pyrzak | 2011-06-28 | 1 | -1/+2 | |
| | | | | | | duplicates have been searched for r=mkanat, r=mkanat | |||||
* | Bug 660464: Linkify the tag name in the confirmation message when tagging bugs | Frédéric Buclin | 2011-05-30 | 1 | -1/+2 | |
| | | | | r=glob a=LpSolit | |||||
* | Bug 28849: Block users from CCing other users if they do not have editbugs privs | Byron Jones | 2011-05-10 | 1 | -0/+4 | |
| | | | | r=LpSolit, a=LpSolit | |||||
* | Bug 653341: Bug.create() fails to error out if an invalid group is passed | Frédéric Buclin | 2011-05-06 | 1 | -0/+7 | |
| | | | | r/a=mkanat | |||||
* | Bug 653406: fix escaping of url vars in error messages | Byron Jones | 2011-04-29 | 1 | -8/+8 | |
| | | | | r=LpSolit, a=LpSolit | |||||
* | Bug 423612 - Allow editing extern_id for users from the admin interface | Jochen Wiedmann | 2011-04-27 | 2 | -0/+10 | |
| | | | | r=mkanat, a=mkanat | |||||
* | Bug 652405: All user fields (assignee, QA contact, Add CC) have the page ↵ | Frédéric Buclin | 2011-04-25 | 1 | -3/+3 | |
| | | | | | | title as the "title" attribute r=dkl a=LpSolit | |||||
* | Bug 647466: Allow Search.pm to take the new URL syntax for custom search | Max Kanat-Alexander | 2011-04-02 | 1 | -0/+7 | |
| | | | | r=mkanat, a=mkanat (module owner) | |||||
* | Bug 634310: Remove WCAG 2.0 violations from the index.cgi to make it | Francisco Donalisio | 2011-03-08 | 2 | -2/+2 | |
| | | | | | W3C WAI compliant. r=timello, a=LpSolit | |||||
* | Bug 639371: Include the charset into HTML pages when the utf8 param is true | Bjoern Jacke | 2011-03-09 | 1 | -0/+4 | |
| | | | | r/a=mkanat | |||||
* | Bug 638489 - Make all boolean charts work with longdescs.isprivate | Max Kanat-Alexander | 2011-03-03 | 1 | -0/+4 | |
| | | | | r=mkanat, a=mkanat (module owner) | |||||
* | Bug 624414: BUGZILLA.value_descs was always empty in the JS, and display_value | Max Kanat-Alexander | 2011-03-02 | 4 | -21/+41 | |
| | | | | | wasn't translating values. r=glob, a=mkanat |