IN_PROGRESS, RESOLVED, VERIFIED.
r=LpSolit, a=mkanat

to use constants instead of local variables. Also, change the permissions
so that they are stricter in general, and work better under suexec.
This also fixes the problem that dependency graphs didn't work under
suexec, and adds a "web" directory by default to Extensions created with
extension/create.pl.
r=mkanat, a=mkanat (module owner)

r=timello, a=mkanat

r/a=mkanat

Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Bug 370885: Arrows in dependency graphs are drawn the wrong way - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r=wicked r=wurblzap r=mkanat a=LpSolit

Bug 458854: The URL to the dependency graph is wrong when using an external webdot server - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r=justdave a=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Bug 387672: Move BUG_STATE_OPEN and is_open_state() into Status.pm - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r/a=mkanat

Bug 398838: Remove the obsolete Util::value_quote() routine - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

r=mkanat a=mkanat

Bug 327914: Make Bugzilla::Util::perform_substs() go away - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r/a=mkanat

Better fix for bug 381837: Clicking a bug in the dependency graph will open the search page instead of the bug - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r=justdave a=LpSolit

Bug 381837: Clicking a bug in the dependency graph will open the search page instead of the bug - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> (original idea from Sebastian W.H. Czymaj <sczymaj@msls.de>) r=mkanat a=LpSolit

Bug 102622: Dependency graphs should be able to be limited by "relationship" - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r=wicked a=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk

Bug 356328: $rankdir should be validated in showdependencygraph.cgi - Patch by Frédéric Buclin <LpSolit@gmail.com> r=bkor a=myk

Bug 355728: [SECURITY] XSS in the "id" parameter of showdependencygraph.cgi when "doall" is set - Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

Bug 282121: Remove globals.pl from scripts that no longer use it - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=wicked, a=myk

Patch by Marc Schumann <wurblzap@gmail.com>,
r=LpSolit, a=justdave

Bug 313695: buglist.cgi and some other scripts do not use the shadow DB anymore - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=justdave

Bug 304075: Eliminate use of $::userid from Bugzilla - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=justdave

Bug 303693: Eliminate deprecated Bugzilla::DB routines from describe*.cgi, duplicates.cgi, quips.cgi, report.cgi, request.cgi and showdependency*.cgi - Patch by Teemu Mannermaa <wicked@etlicon.fi> r=LpSolit a=myk

Bug 312157: Remove $::template and $::vars from globals.pl - Patch by Olav Vitters <bugzilla-mozilla@bkor.dhs.org> r=LpSolit a=justdave

Bug 106003: Dependency tree does not show the summary of the root bug - Patch by Todd Stansell <tjs@tellme.com> r=wicked a=justdave

Bug 304660: PerformSubsts() should be in Util.pm instead of BugMail.pm - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Bug 135145: Graphs generated by local webdot are huge - Patch by Olav Vitters <bugzilla-mozilla@bkor.dhs.org> r/a=justdave

Bug 285112: Move ValidateBugID out of CGI.pl - Patch by Frédéric Buclin <LpSolit@gmail.com> r=joel,wicked a=justdave

Patch by Max Kanat-Alexander <mkanat@kerio.com>  r=vladd  a=justdave

Patch by Max K-A <mkanat@kerio.com>   r=vladd   a=justdave

r=kiko
a=justdave

Patch for bug 225359: Drawing dependency graphs should work on Win32; patch by Byron Jones (glob) <bugzilla@glob.com.au>; r=jouni; a=justdave.

quietly_check_login()/confirm_login() calls.  Cleans up callsites
(consisting of most of our CGIs), swapping (where appropriate) for calls
to Bugzilla->login. Patch by Teemu Mannermaa <wicked@etlicon.fi>.
r=bbaetz, kiko. a=justdave.