Commits · 36253a7195fe34b4989ded4be78c1b62ae5b66fa · etersoft / bugzilla

25 Apr, 2016 1 commit
- Bug 1259881 - CSV export vulnerable to formulae injection (again) · 36253a71
  Frédéric Buclin authored Apr 25, 2016
```
r=sgreen a=dkl
```
  36253a71
22 Feb, 2016 2 commits
- - task.expires needs to be greater than artifacts.expires · 94d623c0
  David Lawrence authored Feb 22, 2016
  
  94d623c0
- - Update artifact expiration date · 1d78355c
  David Lawrence authored Feb 22, 2016
  
  1d78355c
22 Dec, 2015 7 commits
- Bumped version post-release · 66b42025
  David Lawrence authored Dec 22, 2015
  
  66b42025
- Revert "Bug 1230932 - Providing a condition as an ID to the webservice results in a taint error" · 28e72780
  David Lawrence authored Dec 22, 2015
```
This reverts commit fc5cdf3a.
```
  28e72780
- Bumped version to 4.4.11 · 0bdcfeda
  David Lawrence authored Dec 22, 2015
  
  0bdcfeda
- Bug 1232785 - [SECURITY] Buglists in CSV format can be parsed as valid javascript in some browsers · ce870730
  Dylan Hardison authored Dec 22, 2015
```
r=dkl,a=dkl
```
  ce870730
- Bug 1221518: (CVE-2015-8508) [SECURITY] XSS in dependency graphs when displaying the bug summary · 5f7540c1
  Frédéric Buclin authored Dec 22, 2015
```
r/a=dkl
```
  5f7540c1
- Bug 1230932 - Providing a condition as an ID to the webservice results in a taint error · fc5cdf3a
  Dylan Hardison authored Dec 22, 2015
```
r=dkl,a=dkl
```
  fc5cdf3a
- Update release notes · 3e0ed9c3
  Frédéric Buclin authored Dec 22, 2015
  
  3e0ed9c3
16 Dec, 2015 1 commit
- Bug 1160394 - Products.get_products is missing from PUBLIC_METHODS (for backwards compatibility) · 5026bb7e
  Matt Tyson authored Dec 16, 2015
```
r=LpSolit,a=dkl
```
  5026bb7e
11 Dec, 2015 1 commit
- Release notes for Bugzilla 4.4.11 · 22993226
  Frédéric Buclin authored Dec 11, 2015
```
r=dkl
```
  22993226
01 Dec, 2015 1 commit
- Back out bug 1138463. This fix is actually incorrect and the bug was correctly fixed by bug 1223790 · 6c236bc3
  Frédéric Buclin authored Dec 02, 2015
```
a=dkl on IRC
```
  6c236bc3
19 Nov, 2015 1 commit
- Bug 1223790: "AllowOverride AuthConfig" is required to use the "Require" directive in .htaccess · fab04c67
  Frédéric Buclin authored Nov 20, 2015
```
r=gerv a=dkl
```
  fab04c67
10 Sep, 2015 3 commits
- Bumped version post-release · 042a03bf
  David Lawrence authored Sep 10, 2015
  
  042a03bf
- Bumped version to 4.4.10 · ca4b787e
  David Lawrence authored Sep 10, 2015
  
  ca4b787e
- Bug 1202447: [SECURITY] The email address is not properly validated during… · be1be8cb
  Byron Jones ‹:glob› authored Sep 10, 2015
```
Bug 1202447: [SECURITY] The email address is not properly validated during registration if longer than 127 characters
r=LpSolit,a=justdave
```
  be1be8cb
09 Sep, 2015 1 commit
- Bug 1202464: Release notes for Bugzilla 4.4.10 · 2fdebb9f
  Frédéric Buclin authored Sep 10, 2015
```
r=dkl
```
  2fdebb9f
29 Aug, 2015 1 commit
- Bug 1031035: xmlrpc can be DoS'd with billion laughs attack · 8beabdc1
  Byron Jones authored Aug 29, 2015
```
r=LpSolit a=justdave
```
  8beabdc1
11 Aug, 2015 1 commit
- Taskcluster infrastructure improvements and cleanup · 79b334dc
  David Lawrence authored Aug 11, 2015
  
  79b334dc
05 Jun, 2015 1 commit
- Bug 1124401: Explicitly depend on DateTime::TimeZone::Local::Win32 on Windows · df9b5af8
  Frédéric Buclin authored Jun 05, 2015
```
r=dylan a=glob
```
  df9b5af8
04 Jun, 2015 1 commit

Bug 1134743: javascript filter should escape unicode line and paragraph… · 85c1d41d

authored Jun 04, 2015

Bug 1134743: javascript filter should escape unicode line and paragraph separators (causes "Unterminated string literal" javascript error)
r=dylan,a=glob

85c1d41d

18 May, 2015 1 commit
- Bug 1162334: email_enabled value inverted in User.update RPC call · 42ae6d05
  Jeff Fearn authored May 18, 2015
```
r=glob,a=glob
```
  42ae6d05
24 Apr, 2015 1 commit
- Bug 1157405: Bugzilla.parameters is not accessible when requirelogin = 1 and the… · 3a21f123
  Frédéric Buclin authored Apr 24, 2015
```
Bug 1157405: Bugzilla.parameters is not accessible when requirelogin = 1 and the user is not logged in
r=dkl a=glob
```
  3a21f123
15 Apr, 2015 3 commits
- Bump version post-release · ea308068
  David Lawrence authored Apr 15, 2015
  
  ea308068
- Bumped version to 4.4.9 · e9eb3cf4
  David Lawrence authored Apr 15, 2015
  
  e9eb3cf4
- Bug 1154316: Release notes for 4.4.9 · 396925f8
  David Lawrence authored Apr 15, 2015
```
r=LpSolit,a=dkl
```
  396925f8
14 Apr, 2015 1 commit
- Bug 1154099: Bug.get_bugs and Bug.get_history are missing from PUBLIC_METHODS… · b11abfe8
  Matt Tyson authored Apr 15, 2015
```
Bug 1154099: Bug.get_bugs and Bug.get_history are missing from PUBLIC_METHODS (for backwards compatibility)
r=LpSolit a=glob
```
  b11abfe8
13 Apr, 2015 1 commit
- Bug 1151290: It is possible to tell if someone made a private comment on a bug… · d445f63d
  Simon Green authored Apr 13, 2015
```
Bug 1151290: It is possible to tell if someone made a private comment on a bug even if you are not an 'insider'
r=dkl,a=glob
```
  d445f63d
16 Mar, 2015 1 commit
- Bug 1137669: 003safesys.t doesn't test any file due to a missing -T argument · fc4a6dd5
  Frédéric Buclin authored Mar 16, 2015
```
r=dylan a=glob
```
  fc4a6dd5
11 Mar, 2015 1 commit
- Bug 1138463: mod_perl does not support Apache 2.4 directives · f0c2b6bf
  Frédéric Buclin authored Mar 11, 2015
```
r=dkl a=glob
```
  f0c2b6bf
03 Mar, 2015 1 commit
- (TaskCluster) Allow retrieval of the selenium.log for Selenium tests · 00466e7f
  David Lawrence authored Mar 03, 2015
  
  00466e7f
24 Feb, 2015 1 commit
- Intial checking of taskgraph.json for TaskCluster CI · 0b23617e
  David Lawrence authored Feb 24, 2015
  
  0b23617e
20 Feb, 2015 1 commit
- Bug 1133690: .htaccess incorrectly assumes that Apache 2.2.x can read new 2.4 directives · 39a7bb96
  Frédéric Buclin authored Feb 20, 2015
```
r=dkl a=glob
```
  39a7bb96
17 Feb, 2015 4 commits
- Bug 1132887: When starting a sudo session, the password is not validated · 0a18f0f3
  Frédéric Buclin authored Feb 17, 2015
```
r=dkl a=glob
```
  0a18f0f3
- Bug 1112181: Relative dates in the future involving months are incorrectly converted · 24b471d6
  Frédéric Buclin authored Feb 17, 2015
```
r=dylan a=glob
```
  24b471d6
- Bug 1132862 - Update README; add LICENSE file. r,a=glob · d371e14e
  Gervase Markham authored Feb 17, 2015
  
  d371e14e
- - Force use of PostgreSQL 9.1 · c529e096
  David Lawrence authored Feb 16, 2015
```
- Configure DB users in travis.yml
```
  c529e096
16 Feb, 2015 1 commit
- Bug 651786: Modifying the default user object modifies the DEFAULT_USER constant · 3fbd84bb
  Byron Jones authored Feb 16, 2015
```
r=sgreen,a=glob
```
  3fbd84bb
02 Feb, 2015 1 commit
- Bug 1121477: Support for Apache HTTPD 2.4 · 981729e5
  Jochen Wiedmann authored Feb 02, 2015
```
r=dkl,a=glob
```
  981729e5