Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Bumped version to 5.0.2 | David Lawrence | 2015-12-22 | 1 | -1/+1 |
| | |||||
* | Bug 1232785 - [SECURITY] Buglists in CSV format can be parsed as valid ↵ | Dylan Hardison | 2015-12-22 | 1 | -0/+3 |
| | | | | | | javascript in some browsers r=dkl,a=dkl | ||||
* | Bug 1221518: (CVE-2015-8508) [SECURITY] XSS in dependency graphs when ↵ | Frédéric Buclin | 2015-12-22 | 1 | -5/+8 |
| | | | | | | displaying the bug summary r=gerv a=dkl | ||||
* | Bug 1230932 - Providing a condition as an ID to the webservice results in a ↵ | Dylan Hardison | 2015-12-22 | 4 | -1/+21 |
| | | | | | | taint error r=dkl,a=dkl | ||||
* | Update release notes | Frédéric Buclin | 2015-12-22 | 1 | -1/+1 |
| | |||||
* | Bug 1234056: The "Create Comments" documentation incorrectly mentions that ↵ | Frédéric Buclin | 2015-12-21 | 1 | -5/+0 |
| | | | | | | you can add a comment to several bugs at once r/a=dkl | ||||
* | Need to uncomment another line in httpd.conf, see bug 1207582 | Frédéric Buclin | 2015-12-21 | 1 | -1/+2 |
| | |||||
* | Bug 1232190: FlagType.create should require the user to be logged in | Frédéric Buclin | 2015-12-18 | 1 | -7/+3 |
| | | | | r/a=dkl | ||||
* | Bug 1232578: Don't save hashed passwords in audit_log | Frédéric Buclin | 2015-12-16 | 2 | -1/+46 |
| | | | | r/a=dkl | ||||
* | Product.get_products is no longer supported, see bug 1160394 | Frédéric Buclin | 2015-12-16 | 1 | -3/+4 |
| | |||||
* | Bug 1232180 - Incorrect regexp used to filter bug IDs in ↵ | Dylan Hardison | 2015-12-15 | 1 | -2/+2 |
| | | | | | | Bugzilla::WebService::BugUserLastVisit r=dkl,a=dkl | ||||
* | Bug 1169181 - The bug_user_last_visit method returns an empty array for old bugs | Dylan Hardison | 2015-12-15 | 2 | -16/+13 |
| | | | | r=dkl,a=dkl | ||||
* | Bug 1160394 - Products.get_products is missing from PUBLIC_METHODS (for ↵ | Matt Tyson | 2015-12-16 | 1 | -12/+0 |
| | | | | | | backwards compatibility) r=dkl,a=dkl | ||||
* | Release notes for Bugzilla 5.0.2 | Frédéric Buclin | 2015-12-11 | 1 | -0/+27 |
| | | | | r=dkl | ||||
* | Email::Send is no longer used | Frédéric Buclin | 2015-12-10 | 1 | -5/+3 |
| | |||||
* | Bug 1219276: Creating a new group fails if a custom extension adds entries ↵ | Alex Schuilenburg | 2015-12-02 | 2 | -9/+15 |
| | | | | | | to group_control_map and "insertnew" is selected r=LpSolit a=dkl | ||||
* | Back out bug 1138463 - data/assets/.htaccess must be fixed too | Frédéric Buclin | 2015-12-02 | 1 | -12/+2 |
| | |||||
* | Back out bug 1138463. This fix is actually incorrect and the bug was ↵ | Frédéric Buclin | 2015-12-02 | 2 | -44/+8 |
| | | | | | | correctly fixed by bug 1223790 a=dkl on IRC | ||||
* | Bug 1227455 - Multiselect parameters (type 'm') are not read correctly from ↵ | Pami Ketolainen | 2015-11-25 | 2 | -2/+11 |
| | | | | | | the new JSON storage format r/a=dkl | ||||
* | Bug 1223790: "AllowOverride AuthConfig" is required to use the "Require" ↵ | Frédéric Buclin | 2015-11-20 | 3 | -3/+3 |
| | | | | | | directive in .htaccess r=gerv a=dkl | ||||
* | Bug 1196126: Long lines in custom non-editable textarea fields should wrap | Frédéric Buclin | 2015-11-19 | 1 | -4/+1 |
| | | | | r/a=dkl | ||||
* | Bug 1222416: The group list must use 'class' instead of 'align' | Alex Schuilenburg | 2015-11-06 | 2 | -3/+3 |
| | | | | r/a=justdave | ||||
* | Bug 714724: Correctly encode emails as quoted-printable | Frédéric Buclin | 2015-10-23 | 6 | -142/+158 |
| | | | | r=dkl a=sgreen | ||||
* | The correct name of the parameter is cookiepath, not cookiebase | Frédéric Buclin | 2015-10-21 | 1 | -2/+2 |
| | |||||
* | Bug 1200604: The URL Rewrite extension for IIS is needed to use the rest/ ↵ | Frédéric Buclin | 2015-10-21 | 1 | -0/+23 |
| | | | | | | shortcut in URLs (instead of rest.cgi/) r=gerv | ||||
* | XMLRPC works with IIS, see bug 708252 | Frédéric Buclin | 2015-10-21 | 1 | -3/+0 |
| | |||||
* | Bug 1207582: Update instructions to install Apache on Windows (the Apache ↵ | Frédéric Buclin | 2015-10-19 | 1 | -75/+74 |
| | | | | | | MSI no longer exists) r=gerv | ||||
* | Bug 1209926: Document that Strawberry Perl fully works with Bugzilla 5.0.2 ↵ | Frédéric Buclin | 2015-10-19 | 1 | -25/+35 |
| | | | | | | and newer r=gerv | ||||
* | Bug 987742: Strawberry Perl requires C:\strawberry\c\bin\ to be in ↵ | Frédéric Buclin | 2015-09-30 | 1 | -8/+16 |
| | | | | | | $ENV{PATH} to correctly load XS modules r=gerv a=dkl | ||||
* | Bug 1089448: Strawberry Perl throws a "Insecure dependency in sysopen" error ↵ | Frédéric Buclin | 2015-09-25 | 1 | -0/+8 |
| | | | | | | when attaching a file r=gerv a=dkl | ||||
* | Bug 1201809: The default value for user settings cannot be false | Colin Joy | 2015-09-24 | 1 | -1/+1 |
| | | | | r/a=dkl | ||||
* | Bug 1202588: Custom preference multiselect widget - size gets set to null. ↵ | Colin Joy | 2015-09-24 | 1 | -2/+2 |
| | | | | r=gerv | ||||
* | Bug 1184431: Bug searching is slow on PostgreSQL | Matt Tyson | 2015-09-23 | 3 | -14/+171 |
| | | | | r=LpSolit a=dkl | ||||
* | Bug 708252: The XMLRPC API doesn't work with IIS | Pat Thoyts | 2015-09-23 | 1 | -0/+8 |
| | | | | r=LpSolit a=dkl | ||||
* | Bug 714724 missed Bugzilla 5.0.1 | Frédéric Buclin | 2015-09-16 | 1 | -2/+0 |
| | |||||
* | Bug 1188824 - add 'require all granted' to <Directory> block for Windows ↵ | Gervase Markham | 2015-09-15 | 1 | -0/+8 |
| | | | | Apache instructions | ||||
* | Bug 1204862: backout the link to view_job_queue.cgi. This script only exists ↵ | Frédéric Buclin | 2015-09-15 | 1 | -6/+0 |
| | | | | in master | ||||
* | Bumped version post-release | David Lawrence | 2015-09-10 | 1 | -1/+1 |
| | |||||
* | Bumped version to 5.0.1 | David Lawrence | 2015-09-10 | 1 | -1/+1 |
| | |||||
* | Bug 1202447: [SECURITY] The email address is not properly validated during ↵ | Byron Jones ‹:glob› | 2015-09-10 | 1 | -3/+9 |
| | | | | | | registration if longer than 127 characters r=LpSolit,a=justdave | ||||
* | Bug 1191924: Release notes for Bugzilla 5.0.1 | Frédéric Buclin | 2015-09-10 | 1 | -0/+43 |
| | | | | r=dkl | ||||
* | Aliases can now be 40 characters long, see bug 1012506 | Frédéric Buclin | 2015-09-09 | 1 | -1/+1 |
| | |||||
* | Bug 1201041: Allow OpenType fonts as well as TrueType (.otf as well as .ttf) ↵ | Frédéric Buclin | 2015-09-07 | 2 | -6/+6 |
| | | | | | | for graphs r=gerv a=justdave | ||||
* | Bug 1194987: Editing your email address and make it point to a non-existent ↵ | Frédéric Buclin | 2015-09-06 | 8 | -40/+54 |
| | | | | | | email address makes Bugzilla stop working r=gerv a=sgreen | ||||
* | Make editusers.cgi list users properly when is_enabled is not defined. ↵ | Gervase Markham | 2015-09-04 | 1 | -2/+4 |
| | | | | r=LpSolit, a=simon | ||||
* | Bug 1198659: Custom fields of type INTEGER should accept negative integers | Frédéric Buclin | 2015-08-26 | 2 | -2/+5 |
| | | | | r=gerv a=sgreen | ||||
* | Bug 1196969: Custom fields whose visibility depends on the product are not ↵ | Frédéric Buclin | 2015-08-26 | 3 | -19/+44 |
| | | | | | | displayed/hidden correctly r=gerv a=sgreen | ||||
* | Bug 1197436: A remembered search with a ' cannot be edited or deleted | Frédéric Buclin | 2015-08-24 | 1 | -3/+3 |
| | | | | r=gerv a=sgreen | ||||
* | Bug 1171811: [Voting] When a user votes enough to confirm an individual bug, ↵ | David Lawrence | 2015-08-28 | 1 | -1/+1 |
| | | | | | | the bug does not change to CONFIRMED properly r=LpSolit,a=simon | ||||
* | Bug 1196158 - Docs refer to legacy branch names | Simon Green | 2015-08-19 | 5 | -5/+5 |
| | | | | r=gerv, a=simon |