mkanat%bugzilla.org dd21d3d7d3 Bug 802204 (CVE-2012-4197): [SECURITY] Marking an attachment you cannot see as obsolete can disclose its description ...

r=gerv a=LpSolit


git-svn-id: svn://10.0.0.236/branches/BUGZILLA-4_0-BRANCH@264424 18797224-902f-48f8-a5cc-f745e15eee43

2012-11-13 17:31:57 +00:00

..

account

Bug 715705: User auto-completion doesn't work for watched users in the email prefs tab

2012-01-06 09:51:50 +00:00

admin

Bug 685552 - Email auto-completion causes server to thrash

2011-10-24 22:19:56 +00:00

attachment

Bug 722161: Clickjacking is possible in "View All" with HTML attachments

2012-02-08 16:02:50 +00:00

bug

Bug 731178 (CVE-2012-4199): [SECURITY] field-events.js.tmpl discloses product and component names that the user is not allowed to see

2012-11-13 17:16:56 +00:00

email

Bug 652165: Flagmails have a wrong Date: value

2011-04-23 17:26:03 +00:00

extensions

Bug 457373: Refactor the permissions system in Bugzilla::Install::Filesystem

2010-06-25 00:31:32 +00:00

flag

Bug 652410 - 500+ consecutive lines of markup whitespace in show_bug.cgi flags table, depending on flag states

2011-07-06 14:33:13 +00:00

global

Bug 802204 (CVE-2012-4197): [SECURITY] Marking an attachment you cannot see as obsolete can disclose its description

2012-11-13 17:31:57 +00:00

list

Bug 785917: Custom field descriptions are not properly escaped when displayed as bug list column headers

2012-08-27 18:32:07 +00:00

pages

Bug 805649: Release notes for Bugzilla 4.0.9

2012-10-30 21:30:43 +00:00

reports

Bug 621108: [SECURITY] Creating/editing charts lacks CSRF protection

2011-01-24 17:27:06 +00:00

request

Bug 715650 - User auto-completion does not work in request.cgi for requester and requestee as expected

2012-01-11 06:16:23 +00:00

search

Bug 652338: The "Component" multi-select field in the search page automatically scrolls to the top of the list every time you select a component

2011-04-26 22:33:32 +00:00

setup

Bug 619594: (CVE-2010-4568) [SECURITY] Improve the randomness of

2011-01-24 22:07:59 +00:00

whine

Bug 487106: Add explanation when a whining is empty

2010-05-19 18:16:27 +00:00

config.js.tmpl

Bug 357904: Create an object for a Field Value and have Bugzilla::Field->legal_values use it

2008-09-24 02:55:24 +00:00

config.rdf.tmpl

Bug 610217: config.cgi?ctype=rdf should include product.allows_unconfirmed

2010-11-14 19:23:28 +00:00

filterexceptions.pl

Bug 790215 - Flag names are not properly escaped when displayed on confirm user match page

2012-09-11 19:29:05 +00:00

index.html.tmpl

Bug 622822 - add additional_links hook to front page. r,a=mkanat.

2011-01-05 10:50:18 +00:00

sidebar.xul.tmpl

Bug 372979: Make voting into an extension

2010-02-15 23:32:10 +00:00

welcome-admin.html.tmpl

Bug 577407: Several HTML elements have the same ID when editing parameters

2010-07-08 02:31:41 +00:00