r=dkl a=justdave

Bug 360231: importxml.pl ignores the maxattachmentsize and maxlocalattachment parameters when importing attachments
r=dkl a=justdave

r=dkl a=sgreen

Bug 895813: Mandatory custom fields whose visibility depends on a component are not required on bug creation
r=pketolai r=dkl a=sgreen

r=LpSolit, a=simon

Bug 870369: An error about longdescs.comment_id is thrown by MySQL 5.1 and older when upgrading to 4.4 if sql_auto_is_null = 1
r=wicked a=sgreen

Bug 748095: Bugzilla crashes when the shutdownhtml parameter is set and using a non-cookie based authentication method
r=dkl a=justdave

r/a=sgreen

r=glob, a=sgreen

Bug 942599: Documentation about possible_duplicates() lists 'products' as argument instead of 'product'
r=dkl a=sgreen

r=glob, a=sgreen

r=sgreen a=justdave

r/a=glob

r/a=glob

r=glob, a=sgreen

r=glob, a=sgreen

r/a=glob

r=justdave a=glob

Bug 930013: fall back to the bug's current delta_ts when validating a token if one is not provided to process_bug.cgi
r=dkl,a=glob

r/a=LpSolit

r=dkl, a=simon

r=dkl a=glob

Bug 924802: (CVE-2013-1742) [SECURITY] (XSS) "id" and "sortkey" are not sanitized when editing flag types if categoryAction-foo is set
r=dkl a=glob

r=dkl a=sgreen

r=dkl a=sgreen

Bug 907438 - In MySQL, login cookie checking is not case-sensitive, reducing total entropy and allowing easier brute force
r=LpSolit,a=sgreen

Bug 906745 - In MySQL, tokens are not case-sensitive, reducing total entropy and allowing easier brute force
r=LpSolit,a=glob

r=dkl a=LpSolit

r=dkl, a=simon

Bug 864625 - Setting a non-privileged user as a requestee on a secure bug while ccing the same user to give access at the same
r=LpSolit,a=sgreen

r=dkl a=justdave

r=dkl a=justdave

r=dkl a=sgreen

r=dkl, a=simon

r=dkl, a=justdave

r=LpSolit a=justdave

r/a=glob