aboutsummaryrefslogtreecommitdiffstats
path: root/Bugzilla/Token.pm
Commit message (Collapse)AuthorAgeFilesLines
* Bug 1194987: Editing your email address and make it point to a non-existent ↵Frédéric Buclin2015-09-061-23/+29
| | | | | | email address makes Bugzilla stop working r=gerv a=sgreen
* Bug 1128853: Bugzilla shouldn't try to write API tokens into the shadow DBByron Jones2015-03-051-0/+5
| | | | r=dkl,a=glob
* Bug 1046126: Do not generate a new API token every time you access a ↵David Lawrence2014-09-081-3/+10
| | | | | | bug-related page r=sgreen,a=glob
* Bug 996893: Perl 5.18 and newer throw tons of warnings about deprecated modulesFrédéric Buclin2014-08-131-0/+1
| | | | r=dkl a=sgreen
* Bug 726696 - All authenticated WebServices methods should require ↵Simon Green2014-07-271-1/+17
| | | | | | username/pass, token or a valid API key for authentication r=dkl, a=sgreen
* Bug 947823: Replace gender-specific pronouns with gender-neutral pronounsCharlie Somerville2014-02-271-8/+8
| | | | r=gerv a=justdave
* Bug 964113: Digest::SHA 5.82 and newer always croak on wide characters, ↵Frédéric Buclin2014-01-271-0/+4
| | | | | | preventing saved searched from being displayed r=dkl a=justdave
* Bug 906745 - In MySQL, tokens are not case-sensitive, reducing total entropy ↵Dave Lawrence2013-10-161-5/+17
| | | | | | and allowing easier brute force r=LpSolit,a=glob
* Bug 878035: Do not disclose whether a user account exists or not when a user ↵Frédéric Buclin2013-06-061-1/+3
| | | | | | clicks "forgot password" r=dkl a=LpSolit
* Bug 787668: Use |use parent| instead of |use base|Matt Selsky2012-12-011-1/+1
| | | | r/a=LpSolit
* Bug 816747 - Add dummy POD for unPODded methods.Marc Schumann2012-11-301-0/+10
| | | | r/a=LpSolit
* Bug 787529: Use |use 5.10.1| everywhereFrédéric Buclin2012-09-011-7/+2
| | | | r=wicked a=LpSolit
* Bug 767623 - Use HMAC to generate tokens and sensitive graph filenamesReed Loden2012-07-301-8/+6
| | | | [r=LpSolit a=LpSolit]
* Bug 349337: The time between two successive token requests should be a constantKoosha Khajeh Moogahi2012-04-131-3/+3
| | | | r/a=LpSolit
* Bug 680131: Replace the MPL 1.1 license by the MPL 2.0 one in all files, and ↵Frédéric Buclin2012-01-111-20/+5
| | | | | | add it to files which miss one r=kiko r=mkanat r=mrbball a=LpSolit
* Bug 705474 - CSRF vulnerability in createaccount.cgi allows possible ↵Reed Loden2011-12-131-2/+7
| | | | | | unauthorized account creation e-mail request [r=mkanat a=mkanat]
* Bug 677522: IssueEmailChangeToken() should get the old login name from the ↵Frédéric Buclin2011-08-171-4/+4
| | | | | | user object r=timello a=LpSolit
* Bug 677901: Bugzilla crashes when no token is passed to token.cgi but the ↵Frédéric Buclin2011-08-161-6/+4
| | | | | | script expects one, because tokens are incorrectly validated r/a=mkanat
* Bug 678959: Make GenerateUniqueToken work for all tablesByron Jones2011-08-151-1/+1
| | | | r=LpSolit, a=LpSolit
* Bug 589128: Adds a preference allowing users to choose between text or htmlByron Jones2011-07-251-3/+3
| | | | | for bugmail. r=LpSolit, a=LpSolit
* Bug 602165: Change sql_interval to sql_date_math, in preparation forMax Kanat-Alexander2010-10-071-14/+14
| | | | MS-SQL and SQLite support.
* Bug 508823: Make it so that you don't ever have to reset template_inner (likeMax Kanat-Alexander2010-02-281-3/+0
| | | | | Bugzilla->template_inner("")). r=LpSolit, a=LpSolit
* Bug 527586: Use X-Forwarded-For instead of REMOTE_ADDR for trusted proxiesmkanat%bugzilla.org2009-12-311-2/+2
| | | | Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
* Bug 477513: md5_hex() fails if a saved search has UTF8 characters in it - ↵lpsolit%gmail.com2009-02-091-1/+7
| | | | Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit
* Bug 26257: [SECURITY] Bugzilla should prevent malicious webpages from making ↵lpsolit%gmail.com2009-02-021-2/+52
| | | | bugzilla users submit changes to bugs - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit
* Bug 452519: Fix timezones in emails - Patch by Frédéric Buclin ↵lpsolit%gmail.com2009-01-081-7/+9
| | | | <LpSolit@gmail.com> r=wicked a=LpSolit
* Bug 405946: Some emails are not sent in the language chosen by the addressee ↵lpsolit%gmail.com2008-04-021-41/+42
| | | | - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=LpSolit
* Bug 399163: Bugzilla/*.pm should use transactions for database interaction - ↵lpsolit%gmail.com2007-11-191-6/+2
| | | | Patch by Emmanuel Seyman <eseyman@linagora.com> r/a=mkanat
* Bug 366466 - "flag notification mail has canceled spelled incorrectly" ↵reed%reedloden.com2007-03-111-3/+3
| | | | [p=reed r=timeless a=mkanat]
* Fix nits about bug 316797lpsolit%gmail.com2006-11-211-3/+3
|
* Bug 316797: Token.pm needs POD - Patch by Frédéric Buclin ↵lpsolit%gmail.com2006-11-211-0/+181
| | | | <LpSolit@gmail.com> r/a=myk
* Bug 340538: Insecure dependency in exec while running with -T switch at ↵wurblzap%gmail.com2006-10-211-1/+0
| | | | | | | /usr/lib/perl5/site_perl/5.8.6/Mail/Mailer/sendmail.pm line 16. Patch by Marc Schumann <wurblzap@gmail.com>, r=LpSolit, a=myk
* Bug 281181: [SECURITY] It's way too easy to delete ↵lpsolit%gmail.com2006-10-151-3/+54
| | | | versions/components/milestones etc... - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
* Bug 350120: undefined value when creating a new user account - Patch by ↵lpsolit%gmail.com2006-08-261-1/+1
| | | | Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
* Bug 87795: Creating an account should send token and wait for confirmation ↵lpsolit%gmail.com2006-08-201-16/+46
| | | | (prevent user account abuse) - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat r=bkor a=myk
* Bug 343338: Eliminate "my" variables from the root level of modulesmkanat%bugzilla.org2006-07-141-4/+4
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk
* Bug 338375: Use Bugzilla->params everywhere instead of Param().mkanat%bugzilla.org2006-07-041-1/+0
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 342869: Use Bugzilla->params everywhere except templatesmkanat%bugzilla.org2006-07-041-7/+8
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 282121: Remove globals.pl from scripts that no longer use it - Patch by ↵lpsolit%gmail.com2006-06-211-3/+0
| | | | Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
* Bug 339862: Move Bugzilla::BugMail::MessageToMTA() in a separate module - ↵lpsolit%gmail.com2006-06-021-5/+5
| | | | Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave
* I forgot a "fix on checkin" (useless whitespaces)lpsolit%gmail.com2006-03-101-1/+1
|
* Bug 300551: Eliminate deprecated Bugzilla::DB routines from User.pm and ↵lpsolit%gmail.com2006-03-101-67/+60
| | | | Token.pm - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=justdave
* Bug 119524: SECURITY: predictable sessionid (Use a token instead of ↵lpsolit%gmail.com2006-01-031-1/+5
| | | | logincookie) - Patch by Olav Vitters <bugzilla-mozilla@bkor.dhs.org> r=mkanat a=justdave
* Bug 301062: [PostgreSQL] whine.pl fails when using PostgreSQL 8.0.x - Patch ↵lpsolit%gmail.com2005-11-141-1/+1
| | | | by Frédéric Buclin <LpSolit@gmail.com> r=mkanat r=manu a=justdave
* Bug 312157: Remove $::template and $::vars from globals.pl - Patch by Olav ↵lpsolit%gmail.com2005-10-251-7/+7
| | | | Vitters <bugzilla-mozilla@bkor.dhs.org> r=LpSolit a=justdave
* Bug 304582: Move GenerateRandomPassword() out of globals.pl - Patch by ↵lpsolit%gmail.com2005-09-021-2/+2
| | | | Frédéric Buclin <LpSolit@gmail.com> r=joel a=myk
* Bug 303669: Bugzilla mis-uses perl subroutine prototypesmkanat%kerio.com2005-08-131-3/+3
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
* Bug 301508: Remove CGI.pl - Patch by Frédéric Buclin <LpSolit@gmail.com> ↵lpsolit%gmail.com2005-08-101-2/+2
| | | | r=mkanat,wicked a=justdave
* Backout of bug 303669 which broke AppendComment and possibly a numberbugreport%peshkin.net2005-08-091-3/+3
| | | | of other items.
* Bug 303669: Bugzilla mis-uses perl subroutine prototypesmkanat%kerio.com2005-08-091-3/+3
| | | | Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave
generated by cgit v1.2.1 (git 2.21.0) at 2025-03-03 08:12:29 +0000