Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Bumped version to 5.0.3 | David Lawrence | 2016-05-16 | 1 | -1/+1 |
| | |||||
* | Bug 1259881 - CSV export vulnerable to formulae injection (again) | Frédéric Buclin | 2016-04-25 | 1 | -3/+4 |
| | | | | r=sgreen a=dkl | ||||
* | Bug 542239 - Accept pronouns everywhere in query.cgi | Albert Ting | 2016-04-20 | 1 | -1/+2 |
| | | | | r=dkl,a=dkl | ||||
* | Bug 1246228 - Email addresses must not be encoded | Frédéric Buclin | 2016-04-06 | 1 | -14/+3 |
| | | | | r/a=dkl | ||||
* | Bug 1261124: When deleting a component, this component is listed again | Frédéric Buclin | 2016-04-05 | 1 | -1/+4 |
| | | | | r/a=dkl | ||||
* | Bug 1255619: CGI scripts should not send duplicated headers | Frédéric Buclin | 2016-03-21 | 1 | -2/+3 |
| | | | | r/a=dkl | ||||
* | Bug 1230932: Providing a condition as an ID to the webservice results in a ↵ | Frédéric Buclin | 2016-03-19 | 3 | -3/+15 |
| | | | | | | taint error r/a=dkl | ||||
* | Bug 1250908: "Use of uninitialized value" warning thrown when creating a new ↵ | Thorsten Schöning | 2016-03-09 | 1 | -2/+2 |
| | | | | | | bug depending or blocking another one r=LpSolit a=dkl | ||||
* | Bug 1234977: Replace \d+ by [0-9]+ in critical validation places | Frédéric Buclin | 2016-03-09 | 4 | -18/+18 |
| | | | | r=dylan a=dkl | ||||
* | Bug 1246531: REST_DOC should point to bugzilla.readthedocs.org instead of ↵ | Frédéric Buclin | 2016-02-08 | 1 | -1/+1 |
| | | | | | | bugzilla.org r/a=dkl | ||||
* | Bug 1235270: Set submitter_id before calling _check_data() | Mahdi Mokhtari | 2016-01-05 | 1 | -1/+2 |
| | | | | r=LpSolit a=dkl | ||||
* | Bug 1045782: Existing URLs in the See Also field should not throw an error ↵ | Frédéric Buclin | 2016-01-05 | 1 | -2/+3 |
| | | | | | | when the bug is displayed r/a=dkl | ||||
* | Bug 1235395 - whine.pl broken due to a missing generate_email() routine | Dylan Hardison | 2016-01-02 | 2 | -2/+67 |
| | | | | r=lpsolit,a=dylan | ||||
* | Bumped version post-release | David Lawrence | 2015-12-22 | 1 | -1/+1 |
| | |||||
* | Revert "Add missing use List::MoreUtils" | David Lawrence | 2015-12-22 | 1 | -1/+0 |
| | | | | This reverts commit d4470f34b627bb5a15a0af496db67185a922f4f5. | ||||
* | Revert "Bug 1230932 - Providing a condition as an ID to the webservice ↵ | David Lawrence | 2015-12-22 | 3 | -13/+0 |
| | | | | | | results in a taint error" This reverts commit 396ae88235ef68ed45978dfb36774c5fe9a2d699. | ||||
* | Add missing use List::MoreUtils | Dylan Hardison | 2015-12-22 | 1 | -0/+1 |
| | |||||
* | Bumped version to 5.0.2 | David Lawrence | 2015-12-22 | 1 | -1/+1 |
| | |||||
* | Bug 1232785 - [SECURITY] Buglists in CSV format can be parsed as valid ↵ | Dylan Hardison | 2015-12-22 | 1 | -0/+3 |
| | | | | | | javascript in some browsers r=dkl,a=dkl | ||||
* | Bug 1230932 - Providing a condition as an ID to the webservice results in a ↵ | Dylan Hardison | 2015-12-22 | 3 | -1/+14 |
| | | | | | | taint error r=dkl,a=dkl | ||||
* | Bug 1232190: FlagType.create should require the user to be logged in | Frédéric Buclin | 2015-12-18 | 1 | -7/+3 |
| | | | | r/a=dkl | ||||
* | Bug 1232578: Don't save hashed passwords in audit_log | Frédéric Buclin | 2015-12-16 | 2 | -1/+46 |
| | | | | r/a=dkl | ||||
* | Bug 1232180 - Incorrect regexp used to filter bug IDs in ↵ | Dylan Hardison | 2015-12-15 | 1 | -2/+2 |
| | | | | | | Bugzilla::WebService::BugUserLastVisit r=dkl,a=dkl | ||||
* | Bug 1169181 - The bug_user_last_visit method returns an empty array for old bugs | Dylan Hardison | 2015-12-15 | 2 | -16/+13 |
| | | | | r=dkl,a=dkl | ||||
* | Bug 1160394 - Products.get_products is missing from PUBLIC_METHODS (for ↵ | Matt Tyson | 2015-12-16 | 1 | -12/+0 |
| | | | | | | backwards compatibility) r=dkl,a=dkl | ||||
* | Bug 1219276: Creating a new group fails if a custom extension adds entries ↵ | Alex Schuilenburg | 2015-12-02 | 1 | -2/+14 |
| | | | | | | to group_control_map and "insertnew" is selected r=LpSolit a=dkl | ||||
* | Back out bug 1138463 - data/assets/.htaccess must be fixed too | Frédéric Buclin | 2015-12-02 | 1 | -12/+2 |
| | |||||
* | Back out bug 1138463. This fix is actually incorrect and the bug was ↵ | Frédéric Buclin | 2015-12-02 | 1 | -38/+7 |
| | | | | | | correctly fixed by bug 1223790 a=dkl on IRC | ||||
* | Bug 1227455 - Multiselect parameters (type 'm') are not read correctly from ↵ | Pami Ketolainen | 2015-11-25 | 2 | -2/+11 |
| | | | | | | the new JSON storage format r/a=dkl | ||||
* | Bug 714724: Correctly encode emails as quoted-printable | Frédéric Buclin | 2015-10-23 | 3 | -80/+148 |
| | | | | r=dkl a=sgreen | ||||
* | Bug 1201809: The default value for user settings cannot be false | Colin Joy | 2015-09-24 | 1 | -1/+1 |
| | | | | r/a=dkl | ||||
* | Bug 1184431: Bug searching is slow on PostgreSQL | Matt Tyson | 2015-09-23 | 3 | -14/+171 |
| | | | | r=LpSolit a=dkl | ||||
* | Bug 708252: The XMLRPC API doesn't work with IIS | Pat Thoyts | 2015-09-23 | 1 | -0/+8 |
| | | | | r=LpSolit a=dkl | ||||
* | Bumped version post-release | David Lawrence | 2015-09-10 | 1 | -1/+1 |
| | |||||
* | Bumped version to 5.0.1 | David Lawrence | 2015-09-10 | 1 | -1/+1 |
| | |||||
* | Bug 1202447: [SECURITY] The email address is not properly validated during ↵ | Byron Jones ‹:glob› | 2015-09-10 | 1 | -3/+9 |
| | | | | | | registration if longer than 127 characters r=LpSolit,a=justdave | ||||
* | Bug 1201041: Allow OpenType fonts as well as TrueType (.otf as well as .ttf) ↵ | Frédéric Buclin | 2015-09-07 | 1 | -2/+2 |
| | | | | | | for graphs r=gerv a=justdave | ||||
* | Bug 1194987: Editing your email address and make it point to a non-existent ↵ | Frédéric Buclin | 2015-09-06 | 4 | -35/+46 |
| | | | | | | email address makes Bugzilla stop working r=gerv a=sgreen | ||||
* | Bug 1198659: Custom fields of type INTEGER should accept negative integers | Frédéric Buclin | 2015-08-26 | 1 | -1/+1 |
| | | | | r=gerv a=sgreen | ||||
* | Bug 1191937: If a bug comment contains a reference to a very large bug ID, ↵ | Frédéric Buclin | 2015-08-14 | 1 | -1/+3 |
| | | | | | | the bug is no longer viewable with PostgreSQL r=gerv a=sgreen | ||||
* | Bug 1172333: The OS field doesn't recognize Windows 10 | Frédéric Buclin | 2015-08-10 | 1 | -0/+1 |
| | | | | r=gerv a=sgreen | ||||
* | Bug 1191255 - Remove requirement to specify SMTP server during installation ↵ | Gervase Markham | 2015-08-07 | 2 | -22/+3 |
| | | | | on Windows. r=LpSolit, a=simon | ||||
* | Bug 1179160: The login form should not use type="email" when LDAP has ↵ | Frédéric Buclin | 2015-08-06 | 1 | -0/+11 |
| | | | | | | LDAPmailattribute set r=gerv a=dkl | ||||
* | Bug 1189737 - add File::Which to optional module requirements for building ↵ | Gervase Markham | 2015-08-04 | 1 | -1/+7 |
| | | | | documentation. r=LpSolit | ||||
* | Bug 1174560 - DBI link in API docs broken. | Simon Green | 2015-07-29 | 1 | -4/+5 |
| | | | | r=gerv, a=simon | ||||
* | Fix typo in POD | Frédéric Buclin | 2015-07-28 | 1 | -1/+1 |
| | |||||
* | Bug 1186700: Inserting data into the mail_staging table fails on PostgreSQL ↵ | Matt Tyson | 2015-07-28 | 1 | -2/+7 |
| | | | | | | due to unspecified BLOB type r=gerv a=sgreen | ||||
* | Bumped version post-release | David Lawrence | 2015-07-07 | 1 | -1/+1 |
| | |||||
* | Bumped version to 5.0 | David Lawrence | 2015-07-06 | 1 | -1/+1 |
| | |||||
* | Bug 1169395: BugUserLastVisit does not allow multiple bugs to be specified | Dylan William Hardison | 2015-06-10 | 1 | -2/+2 |
| | | | | r=dkl,a=glob |