Commits · ad1e3aef99b806d7f4a5bd18aa0c8cc6102f62e6 · etersoft / bugzilla · GitLab

24 Jan, 2011 10 commits
- Bug 621105 - [SECURITY] Voting lacks CSRF protection · ad1e3aef
  David Lawrence authored Jan 24, 2011
```
r=mkanat,a=LpSolit
```
  ad1e3aef
- Bug 619588: (CVE-2010-4567) [SECURITY] Safety checks that disallow clicking for… · 9244270a
  Frédéric Buclin authored Jan 24, 2011
```
Bug 619588: (CVE-2010-4567) [SECURITY] Safety checks that disallow clicking for javascript: or data: URLs in the URL field can be evaded with prefixed whitespace

and

Bug 628034: (CVE-2011-0048) [SECURITY] For not-logged-in users, the URL field doesn't safeguard against javascript: or data: URLs

r=dkl a=LpSolit
```
  9244270a
- Bug 621572: (CVE-2010-4572) [SECURITY] chart.cgi vulnerable to header-injection… · 38eeecf6
  Reed Loden authored Jan 24, 2011
```
Bug 621572: (CVE-2010-4572) [SECURITY] chart.cgi vulnerable to header-injection due to use of |print "Location:"| instead of $cgi->redirect
[r=mkanat a=LpSolit]
```
  38eeecf6
- Bug 619648: (CVE-2010-4570) [SECURITY] XSS via summary in "possible duplicates"… · 078c4931
  Reed Loden authored Jan 24, 2011
```
Bug 619648: (CVE-2010-4570) [SECURITY] XSS via summary in "possible duplicates" table due to lack of encoding by YUI
[r=mkanat a=LpSolit]
```
  078c4931
- Bug 619637: (CVE-2010-4569) [SECURITY] XSS in user autocomplete due to lack of encoding by YUI · c283f5e7
  Reed Loden authored Jan 24, 2011
```
[r=mkanat r=dkl a=LpSolit]
```
  c283f5e7
- Bug 621110: [SECURITY] Quips (adding/approving/deleting) lacks CSRF protection · fee4dfba
  Frédéric Buclin authored Jan 24, 2011
```
r=dkl a=LpSolit
```
  fee4dfba
- Bug 621108: [SECURITY] Creating/editing charts lacks CSRF protection · 10b4a926
  Frédéric Buclin authored Jan 24, 2011
```
r=dkl a=LpSolit
```
  10b4a926
- Bug 621107: [SECURITY] Sanity checking lacks CSRF protection · f6c4abda
  Frédéric Buclin authored Jan 24, 2011
```
r=dkl a=LpSolit
```
  f6c4abda
- An optional module was accidentally listed in the "required" section of the · 4ab5bc9f
  Max Kanat-Alexander authored Jan 23, 2011
```
release notes.

https://bugzilla.mozilla.org/show_bug.cgi?id=627910
```
  4ab5bc9f
- Bug 627910: Update Release Notes for Bugzilla 4.0rc2 · fdc0fa25
  Max Kanat-Alexander authored Jan 23, 2011
```
r=reed
```
  fdc0fa25
23 Jan, 2011 1 commit
- Bug 625741: Need a hook in update_fielddefs_definition to enable adding columns to fielddefs · 653b2aca
  rojanu authored Jan 23, 2011
```
r/a=mkanat
```
  653b2aca
22 Jan, 2011 3 commits
- Bug 621128 - Remove trailing whitespace from '<div id="view_disabled" >' · 8c73136c
  timeless authored Jan 22, 2011
```
[r=reed a=LpSolit]
```
  8c73136c
- Bug 624696: We need a template hook to add a description to parameters added by extensions · 3ba91b28
  rojanu authored Jan 22, 2011
```
r/a=mkanat
```
  3ba91b28
- Bug 621109: Column changing lacks CSRF protection · 721dfc64
  Frédéric Buclin authored Jan 22, 2011
```
r=dkl a=mkanat
```
  721dfc64
21 Jan, 2011 6 commits
- Bug 627854: Add 'form' hook to create-guided.html.tmpl similar to create.html.tmpl · 66a3af32
  David Lawrence authored Jan 21, 2011
```
r/a=mkanat
```
  66a3af32
- Bug 591165: (CVE-2010-4411) [SECURITY] Bump minimum required version of CGI.pm… · ae5aaada
  Reed Loden authored Jan 21, 2011
```
Bug 591165: (CVE-2010-4411) [SECURITY] Bump minimum required version of CGI.pm to v3.51 in order to address header injection vulnerability.
[r=mkanat a=mkanat]
```
  ae5aaada
- Bug 627660 - Rename "Send" button on final create account page to "Create", as… · affc4b16
  Reed Loden authored Jan 21, 2011
```
Bug 627660 - Rename "Send" button on final create account page to "Create", as nothing is actually sent.
[r=mkanat a=mkanat]
```
  affc4b16
- Bug 626292: "Make description private" checkbox should set bz_private class on the comment box · 4eb82e4c
  David Lawrence authored Jan 21, 2011
```
r/a=mkanat
```
  4eb82e4c
- Bug 623608 - Add intro/outro extension hooks to footer.html.tmpl · 7f5eb650
  David Lawrence authored Jan 21, 2011
```
r/a=mkanat
```
  7f5eb650
- Bug 626658 - Add (take) link to bug edit page to allow quick assigning to the current user · bb5a73e5
  David Lawrence authored Jan 20, 2011
```
r/a=mkanat
```
  bb5a73e5
15 Jan, 2011 2 commits
- Bug 625190: Typo and Missing FK in Bugzilla::DB::Schema · fc329ec4
  David Marshall authored Jan 15, 2011
```
r/a=mkanat
```
  fc329ec4
- Bug 623408: Message-ID is gone in bugmail for new bugs · 19efd87b
  Frédéric Buclin authored Jan 15, 2011
```
r=dkl a=LpSolit
```
  19efd87b
10 Jan, 2011 1 commit
- Bug 624349: Let the config_modify_panels hook add new parameters to existing panels · a9ec34d1
  Frédéric Buclin authored Jan 11, 2011
```
r/a=mkanat
```
  a9ec34d1
09 Jan, 2011 2 commits
- Bug 618841: Bare word "bug" in release notes · 6da18342
  A. Shimono authored Jan 09, 2011
```
r=dkl a=LpSolit
```
  6da18342
- Bug 622204: Bugzilla::Migrate crashes trying to create bugs with resolutions · ad089c24
  authored Jan 09, 2011
```
r/a=mkanat
```
  ad089c24
07 Jan, 2011 4 commits
- Bug 558803: Add a parameter to specify the password complexity for new passwords · 02e52f81
  rojanu authored Jan 07, 2011
```
r/a=LpSolit
```
  02e52f81
- Bug 255524: The duplicates table inherits no CSS classes when viewed in simple format · 0e7d52ed
  Frédéric Buclin authored Jan 07, 2011
```
r=dkl a=LpSolit
```
  0e7d52ed
- Provide user objects to bugmail_recipients hook. r,a=mkanat. · 0459ae82
  Gervase Markham authored Jan 07, 2011
```
https://bugzilla.mozilla.org/show_bug.cgi?id=622813
```
  0459ae82
- Bug 621090 - [SECURITY] Adding saved searches lacks CSRF protection · aa94254a
  David Lawrence authored Jan 06, 2011
```
r/a=mkanat
```
  aa94254a
05 Jan, 2011 3 commits
- Document how to add user settings. r,a=mkanat. · 8cea1907
  Gervase Markham authored Jan 05, 2011
```
https://bugzilla.mozilla.org/show_bug.cgi?id=616427
```
  8cea1907
- Allow extensions to add new Jobs. r,a=mkanat. · f6a3f831
  Gervase Markham authored Jan 05, 2011
```
https://bugzilla.mozilla.org/show_bug.cgi?id=617012
```
  f6a3f831
- Bug 622822 - add additional_links hook to front page. r,a=mkanat. · 237e21f0
  Gervase Markham authored Jan 05, 2011
  
  237e21f0
04 Jan, 2011 1 commit
- Bug 595410: Make it faster to display a bug that has a lot of dependencies. · b6d1cc32
  Max Kanat-Alexander authored Jan 03, 2011
```
r=LpSolit, a=LpSolit
```
  b6d1cc32
02 Jan, 2011 1 commit
- Bug 622437: Remove 'colchange_columns' hook from the Example extension · a1fa8d5f
  Tiago Mello authored Jan 02, 2011
```
r/a=LpSolit
```
  a1fa8d5f
30 Dec, 2010 1 commit
- Bug 622105 - Misspelling in setting_info_invalid error message · 03a6339f
  David Lawrence authored Dec 30, 2010
```
r/a=LpSolit
```
  03a6339f
28 Dec, 2010 2 commits
- Bug 621597: Make mod_perl.pl do the INC configuration itself, instead of · 74fb5b94
  Max Kanat-Alexander authored Dec 28, 2010
```
requiring it to be in httpd.conf.
r=dkl, a=mkanat
```
  74fb5b94
- Remove unused variable, per my review comment · 9271e452
  Frédéric Buclin authored Dec 28, 2010
```
https://bugzilla.mozilla.org/show_bug.cgi?id=615574
```
  9271e452
27 Dec, 2010 3 commits
- Bug 618844: Make clear that the Apache module must be enabled in release notes · d20a7e15
  A. Shimono (himorin) authored Dec 27, 2010
```
r/a=mkanat
```
  d20a7e15
- Bug 618842: Enclose checksetup.pl between <kbd> and </kbd> tags in templates · 4f4b4247
  A. Shimono (himorin) authored Dec 27, 2010
```
r/a=mkanat
```
  4f4b4247
- Bug 599539: Update the mod_perl code for Apache2::SizeLimit 0.92 · 606e568c
  Max Kanat-Alexander authored Dec 27, 2010
```
r=glob, a=mkanat
```
  606e568c