Bug 666781 - t/008filter.t should not require filterexceptions.pl when one does not exist especially with extensions
r/a=mkanat

r/a=mkanat

r/a=mkanat

r/a=mkanat

"html" filter
r=LpSolit, a=LpSolit

Patch by Max Kanat-Alexander <mkanat@bugzilla.org> (module owner) a=mkanat

Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Bug 507389: [SECURITY] Users can see all products when editing bugs - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

Bug 465589: Already selected user accounts are no longer displayed when usemenuforusers is enabled and the account has been disabled - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r=wicked a=LpSolit

Bug 432717: t/008filter.t incorrectly reports [% foo.${bar} = baz %] as unsafe - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r/a=mkanat

Patch By Guy Pyrzak <guy.pyrzak@gmail.com> r=mkanat, a=mkanat

Bug 206037: [SECURITY] Fix escaping/quoting in edit*.cgi scripts - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=ghendricks, a=myk

Bug 329295: 008filter fails if . is not in PATH - Patch by Vlad Dascalu <vladd@bugzilla.org> r=LpSolit a=myk

Bug 284875: Move GetBugLink, GetAttachmentLink, and quoteUrls out of globals.pl - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave

Bug 297857: Incorrect filter name detection in 008filter.t - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=myk

Patch by Dennis Melentyev <dennis.melentyev@infopulse.com.ua>
r=wurblzap, a=justdave

Bug 302669 (2nd part): show_bug.cgi?ctype=xml should allow the option of exporting attachment data - Patch by Greg Hendricks <ghendricks@novell.com> r/a=myk

r= LpSolit, a= justdave

Patch for bug 271373: Fix bogus t/008filter.t error on Win32; patch by Marc Schumann <wurblzap@gmail.com>, r=glob, a=justdave.

Patch for bug 270589: Make t/008filter.t accept empty template directives; patch by Marc Schumann <wurblzap@gmail.com>, r=justdave, r=myk, a=justdave.

all. r=ssdbot

Patch by GavinS <bugzilla@chimpychompy.org>
r=jouni, a=justdave

Patch for bug 190220: templatize editcomponents.cgi; patch by GavinS <bugzilla@chimpychompy.org>; r=jouni, a=justdave.

Patch by byron jones (glob) <bugzilla@glob.com.au>
r=jouni, a=justdave

be added to both test 004 *and* test 008.

Patch for bug 235459: add icalendar output format in buglist; patch by William Jon McCann <mccannwj@pha.jhu.edu>; r=vlad; a=justdave.

Patch by Dave Swegen <dswegen@software.plasmon.com>
r=myk
a=myk

need to exempt Hook.process() calls from the filter checks. I'm assuming
Gerv has stamped this fix, and I'm just checking it in to keep things
green -- back me out later if this was wrong.

Bug 207044 - Filter more template directives. None of these are security bugs, but they need fixing anyway. Patch by gerv; r,a=justdave.

r,a=justdave

Patch Viewer, a pretty way of viewing and manipulating patches (bug 174942).  Requires PatchIterator to be installed, classes uploaded to that bug and will be soon in CPAN.

Bug 13540 - allow key terms, like "Bugzilla" and "bug", to be altered without changing all the templates. Patch by jwilmoth@starbucks.com; r=gerv, a=justdave.

Bug 203318 - 008filter.t fails to do chdir $topdir - if @Support::Templates::include_paths returns more than one path
r=justdave,gerv
a=justdave

Bug 192677: Add new test to flag failure-to-filter situations in the templates, and correct the XSS holes that were discovered as a
result of it.
Patch by Gervase Markham <gerv@mozilla.org>
r= myk, bbaetz, justdave
a= justdave