Bug 637981: (CVE-2011-2379) [SECURITY] "Raw Unified" patch diffs can cause XSS on this domain in IE 6-8 and Safari
r/a=LpSolit

r/a=LpSolit

r=mkanat, a=mkanat

a=LpSolit

r=LpSolit, a=LpSolit

a=LpSolit

Bug 453425 - Send "X-Content-Type-Options: nosniff" header when displaying attachments so IE8 doesn't try to sniff the content type.
[r=LpSolit a=LpSolit]

r/a=mkanat

Bug 490930: Always store attachments locally if they are over X size (and below some threshold!), don't ever display "Big File" checkbox
r=mkanat a=LpSolit

VALIDATOR_DEPENDENCIES, so that they don't need custom code in set_all.

Bug 565879: Merge ThrowCodeError("action_unrecognized"), ThrowUserError("no_valid_action") and ThrowCodeError("unknown_action")
r=ghendricks a=LpSolit

a=LpSolit

[r=mkanat a=mkanat]

r=timello, a=mkanat

r=LpSolit, a=LpSolit

decide which charset to use
r=LpSolit, a=LpSolit

Bug 532518: Credentials are not checked correctly when viewing one attachment from another bug's alternate host - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

Bug 162060: Remove the relationship between "votestoconfirm" and whether or not the UNCONFIRMED status is available, by adding a checkbox to enable the UNCONFIRMED status in editproducts.cgi.
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Bug 523495: Re-work attachment.cgi and the general attachment_base-checking code to prevent an infinite redirect loop when ssl_redirect is on and Bugzilla has an attachment_base set.
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Bug 509053: Implement Bugzilla->feature (feature_enabled in the templates), and use it to detect when PatchReader is available.
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Bug 328628: When attachments have UTF-8 characters in their name, they will now be downloaded with the correct name.
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=Wurblzap, a=mkanat

Bug 140999: Users without edit permissions for an attachment should still be able to make comments - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> a=LpSolit

Bug 509045: Make "use_keywords" a global template variable instead of having to pass it to templates all the time
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Bug 305993: The requestee field may be omitted even when a requestee is already set - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> a=LpSolit

Bug 415541: Implement $bug->set_flags() and $attachment->set_flags() - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> a=LpSolit

Bug 486685: MIME type override for attachments lost in HTTP redirect - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r=wicked a=LpSolit

Bug 454251: Implement Bugzilla::Attachment->create() and $attachment->update() - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> a=LpSolit (module owner)

Bug 476603 - "[SECURITY] Editing attachments doesn't have any CSRF protection" [p=reed r=LpSolit a=LpSolit]

Bug 472206: [SECURITY] Bugzilla should optionally not allow the user to view possibly harmful attachments - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r=mkanat r=justdave a=LpSolit

Bug 38862: [SECURITY] attachments should be at a different hostname - Patch by Byron Jones <bugzilla@glob.com.au> and FrÃdÃric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

Bug 467171: Editing attachments doesn't update the Last-Modified bug timestamp - Patch by A.A. Shimono <shimono@mozilla.gr.jp> r/a=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat

Bug 388251: Implement 'new Bugzilla::Attachment' - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> a=LpSolit

Bug 453743: Decrease the number of calls to the DB about flags when viewing a bug - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r/a=mkanat

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Patch by David Lawrence <dkl@redhat.com> - r/a=LpSolit

Bug 410902: Some characters are mangled in diff and interdiff modes when viewing patches - Patch by FrÃdÃric Buclin <LpSolit@gmail.com> r=shimono, r=mkanat a=LpSolit