Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat

Patch by arbingersys@gmail.com r=mkanat, a=mkanat

Bug 476603 - "[SECURITY] Editing attachments doesn't have any CSRF protection" [p=reed r=LpSolit a=LpSolit]

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Bug 482365: Values displayed in userselect.html.tmpl may be incorrect if "value" is not explicitly set - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=LpSolit

Remove the unused 'unconfirmedstate' variable (as mentioned in the release notes for Bugzilla 2.20) - r=mkanat on IRC

Bug 481910: Login forms point to http:// instead of https:// when ssl='authenticated sessions' (regression) - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat

2nd fix for bug 105960 (xml.cgi and other future xml pages generate invalid XML). Some illegal characters were still not excluded - Patch by David Marshall <dmarshal@yahoo-inc.com> r=LpSolit

2nd part of bug 481506: Filtering email addresses in comments can hang Bugzilla in some cases - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat

Bug 481506: Filtering email addresses in comments can hang Bugzilla in some cases - Patch by Frédéric Buclin <LpSolit@gmail.com> r=glob a=mkanat

Bug 474779: Quicksearch cannot find mixed/upper case keywords - Patch by Kent Rogers <kar@cray.com> r/a=LpSolit

Patch by Marc Schumann <wurblzap@gmail.com>;
r/a=mkanat

Bug 480999: Irrelevant username check in the 'Email Addresses, Bug Numbers, and Votes' section if no checkbox is checked - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat

Bug 154482: Checking none of the checkboxes in the "Email Addresses, Bug Numbers, and Votes" section of query.cgi shouldn't throw an error - Original patch by timeless <timeless@bemail.org>, updated by me, r/a=mkanat

Bug 480001: MySQL 5.1.31 throws an error when you try to SET SESSION max_allowed_packet (and previous versions of MySQL were just ignoring the SET SESSION), so just warn people if their max_allowed_packet is too small
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Bug 480858: Change Columns fails to escape search name when re-running saved search - Patch by Frédéric Buclin <LpSolit@gmail.com> r=bbaetz a=LpSolit

Patch by Marc Schumann <wurblzap@gmail.com>.
r=LpSolit,mkanat; a=mkanat.

r= LpSolit, a= justdave

Bug 126955 - Bugzilla should support translated/localized templates. Patch by burnus; r=gerv, a=justdave.

* NO CODE CHANGES *

test code. Patch makes the tests much better now.

r=zach x2

Patch by ddkilzer@theracingworld.com (David D. Kilzer), r=gerv, justdave

Don't rely on the TEST_VERBOSE environment variable (no longer exported from runtests.sh) and instead print to the TESTOUT file handle pulled in from Test::More.  This will allow the testing backend to check for verbosity rather than having to handle it in the .t files.

Bug 103664 - Tests should "use strict;" and not contain any tabs.  We should also use the TEST_VERBOSE environment variable instead of VERBOSE.
Patch by David D. Kilzer <ddkilzer@theracingworld.com>
Additional edits by myself to add the emacs mode line.  Also, the change to runtests.sh was done by me.

No review needed for tests at this time. NOT PART OF BUILD

Bug 477745: [Oracle] Search doesn't work because of sql_string_until - Patch by Xiaoou <xiaoou.wu@oracle.com> r/a=mkanat

Bug 479446: email_in.pl wasn't splitting lines properly when they ended with CRLF (which is the actual RFC standard email line ending).
Patch by Eric Olson <Eric.Olson@adm.com> r=mkanat, a=mkanat

Bug 480061: Lots of JS was toggling the "display" attribute instead of removing/adding the bz_default_hidden class.
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=glob, a=mkanat

Bug 479164: "Bug" appears raw in "File a Bug" on index.cgi - Patch by Frédéric Buclin <LpSolit@gmail.com> r=ghendricks a=LpSolit