Bommels05/Mozilla
Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Mozilla/mozilla/webtools/bugzilla/Bugzilla
History
bzrmirror%bugzilla.org 597e26f3e9 Bug 1054702: CSV export vulnerable to formulae injection 
r=glob,a=glob


git-svn-id: svn://10.0.0.236/branches/BUGZILLA-4_0-BRANCH@265605 18797224-902f-48f8-a5cc-f745e15eee43
2014-10-06 15:01:28 +00:00
..
Attachment
Bug 637981: (CVE-2011-2379) [SECURITY] "Raw Unified" patch diffs can cause XSS on this domain in IE 6-8 and Safari
2011-08-04 20:49:57 +00:00
Auth
Bug 907438 - In MySQL, login cookie checking is not case-sensitive, reducing total entropy and allowing easier brute force
2013-10-16 17:01:24 +00:00
Config
Bug 824399: (CVE-2013-0786) [SECURITY] build_subselect() leaks the existence of products and components you cannot access
2013-02-19 17:32:38 +00:00
DB
Fix POD to make tests happy
2014-04-17 17:00:41 +00:00
Field
Bug 577054: ChoiceInterface was denying the deletion of any value if
2010-07-23 01:49:27 +00:00
Install
Bug 854074: Remove all references to the uwinnipeg.ca PPM repository as it is no longer available
2013-03-26 11:15:58 +00:00
Job
Bug 515606: Fix the arguments of Bugzilla::Job::Mailer->retry_delay--it's actually a class method, not just a subroutine
2009-09-10 23:47:27 +00:00
JobQueue
Bug 563641: Make bugzilla-queue init script support SuSE
2010-05-19 17:31:36 +00:00
Migrate
Bug 486292: Change the default workflow to UNCONFIRMED, CONFIRMED,
2010-07-06 00:47:25 +00:00
Search
Allow extensions to alter quicksearch terms and search format. r=mkanat.
2011-01-27 13:03:40 +00:00
Template
Bug 508823: Make it so that you don't ever have to reset template_inner (like
2010-03-01 01:46:32 +00:00
User
Bug 776103 - Syntax error in Bugzilla::User::Setting API doc
2012-07-25 21:46:57 +00:00
WebService
Bug 1036213 - (CVE-2014-1546) add '/**/' before jsonrpc.cgi callback to avoid swf content type sniff vulnerability
2014-07-24 17:30:45 +00:00
Whine
Bug 572602: Change the way that Bugzilla::Object determines what fields
2010-06-24 00:47:53 +00:00
Attachment.pm
Bug 1075578: [SECURITY] Improper filtering of CGI arguments
2014-10-06 14:31:49 +00:00
Auth.pm
Bug 707594: Fix broken account lockout notifications
2011-12-05 16:48:52 +00:00
Bug.pm
Bug 1064140: [SECURITY] Private comments can be shown to flagmail recipients who aren't in the insider group
2014-10-06 14:48:02 +00:00
BugMail.pm
Bug 643910: Email notifications from a blocked bug have the timestamp from its last change instead of the timestamp of the blocker
2011-04-27 22:02:18 +00:00
CGI.pm
Bug 771100: Attaching a file to a bug with Perl 5.16 fails
2013-01-21 12:45:38 +00:00
Chart.pm
Bug 1075578: [SECURITY] Improper filtering of CGI arguments
2014-10-06 14:31:49 +00:00
Classification.pm
Bug 514618: Allow restricting the visibility and values of fields by
2010-07-05 22:02:05 +00:00
Comment.pm
Bug 556422: Move the existing bug-moving functionality into an extension
2010-06-18 21:16:53 +00:00
Component.pm
Bug 553266: config.cgi?ctype=rdf spends most of its time loading flagtypes from the database
2010-10-20 00:48:51 +00:00
Config.pm
Bug 434801: [SECURITY] .htaccess doesn't prevent reading old-params.txt from the web - Patch by Reed Loden <reed@reedloden.com> r=mkanat a=LpSolit
2010-02-01 00:50:15 +00:00
Constants.pm
Bump version post-release
2014-07-24 21:46:37 +00:00
DB.pm
Bug 550299: User fields are left blank in buglists and whines when local user accounts are used (i.e. they have no @company.com suffix)
2011-12-06 12:04:13 +00:00
Error.pm
Bug 574879: Create a test that assures the correctness of Search.pm's
2010-07-07 21:47:00 +00:00
Extension.pm
Document how to add user settings. r,a=mkanat.
2011-01-05 17:03:49 +00:00
Field.pm
Bug 583287: Some fields should not be displayed in bugmail for new bugs
2010-08-02 23:21:13 +00:00
Flag.pm
Bug 1064140: [SECURITY] Private comments can be shown to flagmail recipients who aren't in the insider group
2014-10-06 14:48:02 +00:00
FlagType.pm
Bug 553266: config.cgi?ctype=rdf spends most of its time loading flagtypes from the database
2010-10-20 00:48:51 +00:00
Group.pm
Bug 653477: (CVE-2011-2380) [SECURITY] Group names can be guessed when creating or editing a bug
2011-08-04 20:17:35 +00:00
Hook.pm
Bug 468375: Add example code for hooks that were missing it.
2011-04-05 00:06:29 +00:00
Install.pm
Bug 577956: Bugs which were never confirmed cannot be reopened as UNCONFIRMED
2010-08-01 23:37:33 +00:00
JobQueue.pm
Bug 530270: Whining fails if mail queueing is enabled - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit
2009-11-22 22:26:04 +00:00
Keyword.pm
Bug 572602: Change the way that Bugzilla::Object determines what fields
2010-06-24 00:47:53 +00:00
Mailer.pm
Bug 826678: Disable warnings about the deprecated Return::Value module when loading Email::Send
2013-01-05 23:31:21 +00:00
Migrate.pm
Bug 682203 - migrate.pl fails at requirements check.
2011-08-31 13:32:51 +00:00
Milestone.pm
Bug 572602: Change the way that Bugzilla::Object determines what fields
2010-06-24 00:47:53 +00:00
Object.pm
Fix typo
2012-11-02 13:03:22 +00:00
Product.pm
Bug 653477: (CVE-2011-2380) [SECURITY] Group names can be guessed when creating or editing a bug
2011-08-04 20:17:35 +00:00
Search.pm
Bug 550299: User fields are left blank in buglists and whines when local user accounts are used (i.e. they have no @company.com suffix)
2011-12-06 12:04:13 +00:00
Series.pm
Bug 577089: Make convert-workflow fix the query values for series
2010-07-08 00:33:57 +00:00
Status.pm
Bug 486292: Change the default workflow to UNCONFIRMED, CONFIRMED,
2010-07-06 00:47:25 +00:00
Template.pm
Bug 1054702: CSV export vulnerable to formulae injection
2014-10-06 15:01:28 +00:00
Token.pm
Bug 906745 - In MySQL, tokens are not case-sensitive, reducing total entropy and allowing easier brute force
2013-10-16 16:57:35 +00:00
Update.pm
fix bustage in 012throwables.t
2010-02-20 21:16:19 +00:00
User.pm
Bug 861528: $user->can_enter_product() now returns the product object instead of 1
2013-04-15 21:31:43 +00:00
Util.pm
Bug 968576: [SECURITY] Dangerous control characters allowed in Bugzilla text
2014-04-17 17:01:18 +00:00
Version.pm
Bug 572602: Change the way that Bugzilla::Object determines what fields
2010-06-24 00:47:53 +00:00
WebService.pm
Bug 579514: Make Bug.attachments also return attachment data
2010-07-20 22:03:21 +00:00
Whine.pm
Bug 530468: Create a read-only Bugzilla::Whine object for whine events and
2010-07-06 00:31:45 +00:00