justdave%syndicomm.com 2d28f97361 SECURITY FIX see bug 108385: Due to trusting of passed form fields that shouldn't have been trusted, it was possible to add a comment to a bug pretending to be someone else if you edited the HTML by hand before submitting. The bug form did not include the field in question, but due to legacy processing code, the field was still trusted if it was present. ...

Patch by Dave Miller <justdave@syndicomm.com>
r= jake x2


git-svn-id: svn://10.0.0.236/trunk@107350 18797224-902f-48f8-a5cc-f745e15eee43

2001-11-05 20:47:17 +00:00

..

apidoc

patch from Pavel Hlavnicka pavel@gingerall.cz

2001-09-17 18:58:14 +00:00

bonsai

Checking in fix for bug #86920, fix from jake@acutex.net

2001-10-31 04:30:33 +00:00

browser-buster

…

bugzilla

SECURITY FIX see bug 108385: Due to trusting of passed form fields that shouldn't have been trusted, it was possible to add a comment to a bug pretending to be someone else if you edited the HTML by hand before submitting. The bug form did not include the field in question, but due to legacy processing code, the field was still trusted if it was present.

2001-11-05 20:47:17 +00:00

bugzilla3

Blatantly copied http://scarab.tigris.org/scarab-design.html and changed it to suit Bugzilla

2001-05-03 10:57:46 +00:00

build

Fix missing description problem for options that required multiple lines for the description.

2001-10-21 19:11:25 +00:00

despot

Changing despot owner to endico@mozilla.org with her permission

2001-06-19 04:04:34 +00:00

leak-o-matic

…

lxr

Bug 104540 LXR updates for .idl collaboration diagrams

2001-10-25 01:05:07 +00:00

miscstats

Fix for bug 102723: If genstats dies trying to change databases it will now include the name of the statistic it was trying to generate in addition to the name of the database it was trying to change to in the error message.

2001-10-02 22:56:50 +00:00

mozbot

Fix for bug 72951 - oopsbot should have flooder defences

2001-08-14 16:53:30 +00:00

newsbot

change to using google links instead of the defunct deja.com links

2001-04-09 23:49:51 +00:00

PLIF

Correcting minor typo (extraneous ')'s).

2001-10-04 16:09:32 +00:00

registry

Adding white background, so linux sees white

2001-04-10 01:10:07 +00:00

tinderbox

scrape comment

2001-11-05 08:50:55 +00:00

tinderbox2

Remove the /var/run/ stuff. I need to think this through more carefully.

2001-10-18 16:19:59 +00:00

web-sniffer

…

webstats

change zcat to cat. don't assume that the file is compressed

2001-08-01 04:03:18 +00:00

whack-license

…