Commits · 40c2be3f0aa508dffb45f2d6707aa90f558503c1 · etersoft / bugzilla

17 Oct, 2013 2 commits
- Bug 927736: "invalid token" error if someone else changes the CC list while viewing a bug · 40c2be3f
  Byron Jones authored Oct 17, 2013
```
r/a=LpSolit
```
  40c2be3f
- Bug 927570: mid-air conflict fails to check all changed fields · 3ac1c96d
  Byron Jones authored Oct 17, 2013
```
r=dkl, a=simon
```
  3ac1c96d
16 Oct, 2013 8 commits
- Bump version to 4.5.1 · 4ea2013f
  Dave Lawrence authored Oct 16, 2013
  
  4ea2013f
- Bug 924932: (CVE-2013-1743) [SECURITY] Field values are not escaped correctly in tabular reports · 1176b66a
  Frédéric Buclin authored Oct 16, 2013
```
r=dkl a=glob
```
  1176b66a
- Bug 924802: (CVE-2013-1742) [SECURITY] (XSS) "id" and "sortkey" are not… · 94e43ad5
  Frédéric Buclin authored Oct 16, 2013
```
Bug 924802: (CVE-2013-1742) [SECURITY] (XSS) "id" and "sortkey" are not sanitized when editing flag types if categoryAction-foo is set
r=dkl a=glob
```
  94e43ad5
- Bug 913904: (CVE-2013-1734) [SECURITY] CSRF when updating attachments · 362e6897
  Frédéric Buclin authored Oct 16, 2013
```
r=dkl a=sgreen
```
  362e6897
- Bug 911593: (CVE-2013-1733) [SECURITY] CSRF in process_bug.cgi · 637fb098
  Frédéric Buclin authored Oct 16, 2013
```
r=dkl a=sgreen
```
  637fb098
- Bug 907438 - In MySQL, login cookie checking is not case-sensitive, reducing… · e78f6c00
  Dave Lawrence authored Oct 16, 2013
```
Bug 907438 - In MySQL, login cookie checking is not case-sensitive, reducing total entropy and allowing easier brute force
r=LpSolit,a=sgreen
```
  e78f6c00
- Bug 906745 - In MySQL, tokens are not case-sensitive, reducing total entropy and… · 024a3769
  Dave Lawrence authored Oct 16, 2013
```
Bug 906745 - In MySQL, tokens are not case-sensitive, reducing total entropy and allowing easier brute force
r=LpSolit,a=glob
```
  024a3769
- Bug 912641: Release notes for Bugzilla 4.4.1 · 19bfba90
  Frédéric Buclin authored Oct 16, 2013
```
r=dkl a=LpSolit
```
  19bfba90
15 Oct, 2013 1 commit
- Bug 917370: large dependency trees are very slow to load · 9a19887e
  Byron Jones authored Oct 15, 2013
```
r=dkl, a=simon
```
  9a19887e
14 Oct, 2013 2 commits
- Bug 340160: Speed up LogActivityEntry() · 94929b9f
  Frédéric Buclin authored Oct 14, 2013
```
r=dkl a=glob
```
  94929b9f
- Backout 1st part of bug 340160: state $sth doesn't work fine with mod_perl · 5ab9af11
  Frédéric Buclin authored Oct 14, 2013
  
  5ab9af11
11 Oct, 2013 2 commits
- Fixes on checkin for bug 769134 · c88c3c0a
  Frédéric Buclin authored Oct 11, 2013
  
  c88c3c0a
- Bug 916254 - Bug.get should include the name for reporter, assigned_to and qa_contact · 2516718a
  Frank Becker authored Oct 11, 2013
```
r=dkl,a=sgreen
```
  2516718a
01 Oct, 2013 1 commit
- Bug 919852 - Add ability to perform quicksearch using Bug.search · 8a39b183
  Dave Lawrence authored Oct 01, 2013
```
r/a=glob
```
  8a39b183
30 Sep, 2013 1 commit

Bug 864625 - Setting a non-privileged user as a requestee on a secure bug while… · 6d7c379c

authored Sep 29, 2013

Bug 864625 - Setting a non-privileged user as a requestee on a secure bug while ccing the same user to give access at the same 
r=LpSolit,a=sgreen

6d7c379c

28 Sep, 2013 1 commit
- Bug 891311: Text in the "My Requests" page is misleading about how the AND/OR radio button works · d8ee22ef
  Frédéric Buclin authored Sep 28, 2013
```
r=dkl a=justdave
```
  d8ee22ef
27 Sep, 2013 3 commits
- Bug 798927: An error should be thrown when passing an illegal pronoun · 51e15329
  Imran Chaudhry authored Sep 28, 2013
```
r=LpSolit a=justdave
```
  51e15329
- Bug 340160: Speed up LogActivityEntry() · 2d802ebc
  Frédéric Buclin authored Sep 28, 2013
```
r=dkl a=justdave
```
  2d802ebc
- Bug 851267: Bugzilla times out when a user has several thousands of votes · 48bc6d39
  Frédéric Buclin authored Sep 28, 2013
```
r=dkl a=justdave
```
  48bc6d39
26 Sep, 2013 9 commits
- Bug 917483 - Bug.update_attachment causes error when updating filename using key 'file_name' · 5d0e6171
  Dave Lawrence authored Sep 26, 2013
  
  5d0e6171
- Bug 784072 (2nd part): Exclude extensions from POD coverage checks · 0bb48df6
  Frédéric Buclin authored Sep 26, 2013
  
  0bb48df6
- fix bustage due to bug 891236: it doesn't pass t/002goodperl.t · c3a8600e
  Frédéric Buclin authored Sep 26, 2013
  
  c3a8600e
- Bug 920787: The "Flags:" label in bug reports is badly aligned · bd15d3a1
  Frédéric Buclin authored Sep 26, 2013
```
r=dkl a=sgreen
```
  bd15d3a1
- Bug 917669 - invalid or expired authentication tokens and cookies should throw… · feeccb6a
  Dave Lawrence authored Sep 26, 2013
```
Bug 917669 - invalid or expired authentication tokens and cookies should throw errors, not be silently ignored
r/a=glob
```
  feeccb6a
- Bug 893589 - 004template.t fails when templates in extension directory · 18637452
  Simon Green authored Sep 26, 2013
```
r=dkl, a=simon
```
  18637452
- Bug 769134 - Bugzilla unintentionally removes groups when changing products with multiple bugs · 52cbd16e
  Simon Green authored Sep 26, 2013
```
r=dkl, a=justdave
```
  52cbd16e
- Bug 714523 - editversions.cgi should use ->set_all · 646aa223
  Sunil Joshi authored Sep 26, 2013
```
r=simon, a=simon
```
  646aa223
- Bug 621216 - Don't call GetQuip() if the user doesn't want quips · 2fe00715
  Sunil Joshi authored Sep 26, 2013
```
r=simon, a=simon
```
  2fe00715
25 Sep, 2013 1 commit
- Bug 455301: Don't show password box on userprefs.cgi if your auth method didn't use DB passwords · 58c09a16
  Dirk Steinmetz authored Sep 25, 2013
```
r=LpSolit a=justdave
```
  58c09a16
24 Sep, 2013 1 commit
- Temporary fix for bug 916882: whitelist product and component when used with the changed* operators · 21c92686
  Frédéric Buclin authored Sep 24, 2013
```
r/a=glob
```
  21c92686
23 Sep, 2013 2 commits
- Bug 919475: [Oracle] Crash when non-mandatory free text custom fields are left… · 9ddb2294
  Jiří Netolický authored Sep 23, 2013
```
Bug 919475: [Oracle] Crash when non-mandatory free text custom fields are left empty on bug creation
r=LpSolit a=justdave
```
  9ddb2294
- Bug 918647: "Use of uninitialized value" warnings when using quicksearch · a3c710bb
  Byron Jones authored Sep 23, 2013
```
r=simon, a=glob
```
  a3c710bb
20 Sep, 2013 1 commit
- Bug 918362 - The "order" parameter passed to Bug.search is ignored · 9daa109f
  Dave Lawrence authored Sep 20, 2013
```
r=LpSolit,a=glob
```
  9daa109f
19 Sep, 2013 5 commits
- Bug 897510 - Create and Modify User Screen must also contain password rules as hint · edd2afc7
  Sunil Joshi authored Sep 19, 2013
```
r=simon, a=glob
```
  edd2afc7
- Bug 373820 - View User Account Log should include real name · ff7e3843
  Sunil Joshi authored Sep 19, 2013
```
r=simon, a=glob
```
  ff7e3843
- Bug 368541 - Make it obvious that the bug alias is not part of the bug summary · 14d6245d
  Sunil Joshi authored Sep 19, 2013
```
r=simon, a=simon
```
  14d6245d
- Bug 365501 - admin/products/groupcontrol/updated uses p as br · c14936b8
  Sunil Joshi authored Sep 19, 2013
```
r=simon, a=glob
```
  c14936b8
- Bug 332034 - Add New Attachment as an option for attachment.cgi when we are not… · b933a4e9
  Sunil Joshi authored Sep 19, 2013
```
Bug 332034 - Add New Attachment as an option for attachment.cgi when we are not passed any parameters\nr=simon, a=glob
```
  b933a4e9