bzrmirror%bugzilla.org 3e500ddd23 Bug 1075578: [SECURITY] Improper filtering of CGI arguments ...

r=dkl,a=sgreen


git-svn-id: svn://10.0.0.236/branches/BUGZILLA-4_0-BRANCH@265600 18797224-902f-48f8-a5cc-f745e15eee43

2014-10-06 14:31:49 +00:00

..

banner.html.tmpl

…

choose-classification.html.tmpl

Bug 399079: Remove the 'showallproducts' parameter - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat

2008-12-10 18:43:36 +00:00

choose-product.html.tmpl

Bug 568609: Duplicated "Bugzilla" word in the page header of describecomponents.cgi

2010-05-28 21:02:58 +00:00

code-error.html.tmpl

Bug 913904: (CVE-2013-1734) [SECURITY] CSRF when updating attachments

2013-10-16 17:29:09 +00:00

common-links.html.tmpl

Bug 486050: Bugzilla should prefill quicksearch box when showing search results from a quicksearch

2010-05-12 17:16:22 +00:00

confirm-action.html.tmpl

Bug 593138: When confirming a CSRF violation (the confirm-action page),

2010-10-23 00:10:32 +00:00

confirm-user-match.html.tmpl

Bug 790215 - Flag names are not properly escaped when displayed on confirm user match page

2012-09-11 19:29:05 +00:00

docslinks.html.tmpl

Bug 182975: Bugzilla directory structure to be adopted to l10n needs - Patch by A.A. Shimono (himorin) <shimono@mozilla.gr.jp> r=LpSolit r=mkanat a=LpSolit

2008-04-03 19:05:51 +00:00

field-descs.none.tmpl

Bug 634812: Having a very large number of custom fields can make displaying show_bug.cgi slow

2011-08-01 08:48:47 +00:00

footer.html.tmpl

Bug 623608 - Add intro/outro extension hooks to footer.html.tmpl

2011-01-21 05:19:52 +00:00

header.html.tmpl

Bug 824616: The urlbase field in global/header.html.tmpl must be filtered

2013-01-03 12:31:28 +00:00

help.html.tmpl

Bug 529201: Add help for every single field to fields.html

2010-02-17 22:01:39 +00:00

hidden-fields.html.tmpl

Bug 565899: Make the html_linebreak filter safe by having it first call the

2010-05-19 17:33:03 +00:00

initialize.none.tmpl

…

js-products.html.tmpl

…

message.html.tmpl

…

message.txt.tmpl

…

messages.html.tmpl

Bug 1075578: [SECURITY] Improper filtering of CGI arguments

2014-10-06 14:31:49 +00:00

per-bug-queries.html.tmpl

Bug 621090: [SECURITY] Adding saved searches lacks CSRF protection

2011-01-24 17:02:20 +00:00

reason-descs.none.tmpl

Bug 581316 – Minor typos in notification reason descriptions.

2010-07-23 11:49:01 +00:00

select-menu.html.tmpl

…

setting-descs.none.tmpl

Bug 398473: User preference for the position of the comment box

2010-06-22 02:46:38 +00:00

site-navigation.html.tmpl

Bug 372979: Make voting into an extension

2010-02-15 23:32:10 +00:00

tabs.html.tmpl

Bug 547496: Add IDs to some form elements

2010-02-24 12:47:16 +00:00

textarea.html.tmpl

Bug 716283: Clickjacking in the attachment "Details" page allows to bypass token checks

2012-01-10 00:16:16 +00:00

useful-links.html.tmpl

Bug 478173: Add a "Remember" checkbox to the header/footer login form and restructure the header and footer so that it fits nicely.

2009-02-24 00:35:39 +00:00

user-error.html.tmpl

Bug 725663 - (CVE-2012-0453) [SECURITY] CSRF vulnerability in the XML-RPC API when using mod_perl

2012-02-22 15:32:12 +00:00

user.html.tmpl

Bug 219021: Only display email addresses to logged-in users

2009-01-29 21:22:39 +00:00

userselect.html.tmpl

Bug 685552 - Email auto-completion causes server to thrash

2011-10-24 22:19:56 +00:00

value-descs.js.tmpl

Bug 581448: Localize the status and resolution values in the list of

2010-10-13 23:39:25 +00:00

variables.none.tmpl

Bug 568595: Add a hook to the end of variables.none.tmpl

2010-06-22 02:51:13 +00:00