Patch By Elliotte Martin <elliotte_martin@yahoo.com> r=mkanat, a=mkanat

Bug 425665: [SECURITY] XSS in show_bug.cgi: id isn't filtered for format=multiple - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r=mkanat r=wurblzap a=LpSolit

Bug 415652: Implement Bugzilla->active_custom_fields - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r/a=mkanat

r=vladd, r=mkanat a=mkanat

r=vladd a=mkanat

Bug 392186: Remove version headers from all templates - Patch by GavinS <bugzilla@chimpychompy.org> r/a=LpSolit

Patch by Marc Schumann <wurblzap@gmail.com>,
r=glob,LpSolit; a=LpSolit

Bug 377026: Replace all occurences of status_descs.FOO by get_status("FOO") (next step in supporting custom bug statuses) - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r=gerv a=LpSolit

Bug 364165 - ""Unclassified" classification appears in "Format for Printing" but not normal view" [p=reed r=bkor a=justdave]

Bug 206037: [SECURITY] Fix escaping/quoting in edit*.cgi scripts - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=justdave

Patch By victory(_RSZ_) <bmo2007@rsz.jp> r=mkanat, a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk

Bug 341924: When viewing several bugs at once using show_bug.cgi?format=multiple, invalid bugs should generate an error message - Patch by Frédéric Buclin <LpSolit@gmail.com> r=timeless a=myk

Bug 219555: 'Format for Printing' page is a mess - Patch by Olav Vitters <bugzilla-mozilla@bkor.dhs.org> r=LpSolit a=justdave

Bug 320960: When viewing bugs in the "Format for printing" (aka Long format), the bug status and resolution are not translated correctly - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=justdave

Bug 292096: Remove the extra Description label in long list format - Patch by Emmanuel Seyman <eseyman@linagora.com> r=LpSolit a=justdave

Patch by   Rob Siklos <robzilla@siklos.ca>   r=wurblzap, glob   a=myk

Patch by Rob Siklos <robzilla@siklos.ca>   r=wurblzap, glob   a=myk

Patch for bug 103636: Support specifying a date on which a bug is expected to be resolved; patch by Alexandre Michetti Manduca <michetti@grad.icmc.usp.br>, r=jouni, a=myk.

Patch by Gervase Markham <gerv@mozilla.org>
r= justdave,vladd, a= justdave

Patch for bug 258355: remove 1x1.gif and use CSS instead in order to create suitable spacing; patch by Frédéric Buclin <LpSolit@netscape.net>; r=kiko, a=justdave.

patch by Albert Ting
r=joel, glob
a=myk

ant.jpg out to avoid complaints about "this very important testing
resource" <wink>. Fixed single callsite (and someone please explain to
me what it's useful for!)  a=justdave, myk.

Bug 232413 - remove occurrences of   in favour of [%+ construct to prevent whitespace chomping. Patch by gerv; r=kiko, a=justdave.

Patch for bug 228894: Change HTML comments to template-toolkit ones for template version numbers; patch by GavinS <bugzilla@chimpychompy.org>; r=kiko; a=justdave.

Bug 207044 - Filter more template directives. None of these are security bugs, but they need fixing anyway. Patch by gerv; r,a=justdave.

Fix by GavinS <bugzilla@chimpychompy.org>.
r=myk, a=myk

Bug 13540 - allow key terms, like "Bugzilla" and "bug", to be altered without changing all the templates. Patch by jwilmoth@starbucks.com; r=gerv, a=justdave.

Bug 192677: Add new test to flag failure-to-filter situations in the templates, and correct the XSS holes that were discovered as a
result of it.
Patch by Gervase Markham <gerv@mozilla.org>
r= myk, bbaetz, justdave
a= justdave

r=burnus a=justdave

Patch by Frank Wein <mcsmurf@gmx.net>
r=jake
a=justdave

patch by jeff.hedlund@matrixsi.com
2xr=joel,justdave

Bug 143286 - Add support for Insiders, Private comments, Private Attachments. Patch by bugreport@peshkin.net; r=gerv.

r=jouni, gerv

Patch by mental <xor@ivwnet.com>.
r=justdave,myk