Mozilla

History

mkanat%bugzilla.org a735fb8b9b Bug 314871: (CVE-2009-3989) [SECURITY] Prevent web browsers from seeing CVS/, contrib/, docs/, and t/ directories.

Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat


git-svn-id: svn://10.0.0.236/branches/BUGZILLA-3_4-BRANCH@259535 18797224-902f-48f8-a5cc-f745e15eee43

2010-02-01 00:37:18 +00:00

Attachment

Bug 441921: context=file fails due to taint issues in file names and file rev numbers - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=himorin a=LpSolit

2008-06-29 17:38:03 +00:00

Auth

Bug 385606: Logincookies are recreated at each HTTP request when using the 'Env' auth method - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r/a=mkanat

2009-12-31 12:18:06 +00:00

Config

Bug 482584: Add a parameter to hide the "See Also" field

2009-04-17 22:30:33 +00:00

Accidentally committed the last patch to the wrong branch--reverting.

2010-01-31 23:38:36 +00:00

Field

Bug 504944: Use of uninitialized value in hash element at Bugzilla/Field/Choice.pm line 253 - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r/a=mkanat

2009-07-23 21:35:59 +00:00

Install

Bug 314871: (CVE-2009-3989) [SECURITY] Prevent web browsers from seeing CVS/, contrib/, docs/, and t/ directories.

2010-02-01 00:37:18 +00:00

Job

Bug 515606: Fix the arguments of Bugzilla::Job::Mailer->retry_delay--it's actually a class method, not just a subroutine

2009-09-10 23:47:27 +00:00

JobQueue

Bug 475403: A RHEL SysV Init Script for jobqueue.pl

2009-09-04 21:22:52 +00:00

Bug 490562: QuickSearch "+" operator adds $qsword over and over for @subWords

2009-04-29 00:32:28 +00:00

Template/Plugin

Bug 517793: Use the ENCODING parameter of Template Toolkit instead of having a custom parser object. This also fixes a memory leak on mod_perl.

2009-09-26 23:37:31 +00:00

User

Bug 364161: Inefficient SQL: Selecting subclass from setting table

2008-09-05 23:03:03 +00:00

WebService

Bug 515191: [SECURITY] SQL Injection via Bug.search (CVE-2009-3125) and Bug.create (CVE-2009-3165)

2009-09-11 16:14:09 +00:00

Attachment.pm

Bug 399074: Remove the 'maxpatchsize' parameter - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r/a=mkanat

2008-12-10 18:32:30 +00:00

Auth.pm

Bug 134022: PERFORMANCE: deleting old login cookies locks login checks

2009-01-20 20:10:08 +00:00

Bug.pm

Bug 532493: [SECURITY] Restricting a bug to a group while moving it to another product has no effect if the group is not used by both products - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

2010-02-01 00:21:45 +00:00

BugMail.pm

Bug 534587 - "Bugmail uses the timezone of the changee instead of the user receiving the mail" [p=reed r=mkanat a=mkanat]

2010-01-05 07:07:46 +00:00

CGI.pm

Bug 509030: "Changes older than" in Advanced Search is sometimes ignored - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=gerv a=LpSolit

2010-01-12 16:12:59 +00:00

Chart.pm

Bug 389396: Do not list series you cannot plot - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=dkl a=LpSolit

2009-08-17 23:01:46 +00:00

Classification.pm

Bug 471866: Classification name length and sortkey max value not validated - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=wicked a=LpSolit

2009-01-04 23:15:31 +00:00

Component.pm

Bug 313123: Implement $component->create and $component->update based on Object.pm - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r/a=mkanat

2007-10-11 23:07:24 +00:00

Config.pm

Bug 347707: Changing parameters could silently fail because we weren't correctly checking the return code from "rename"

2008-12-24 19:08:20 +00:00

Constants.pm

Bump version number post-release.

2009-11-19 05:05:15 +00:00

DB.pm

Bug 508181: UTF-8 table conversion was failing when there were FKs on the column or on related columns

2009-08-06 14:54:22 +00:00

Error.pm

Bug 435507: Provide a method of hooking the WebService error codes

2008-05-27 22:11:56 +00:00

Field.pm

Bug 525025: Custom field names having UTF8-characters in them crash Bugzilla - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r/a=mkanat

2009-11-01 19:51:35 +00:00

Flag.pm

Fix incorrect regexp for bug 333648 - Patch by me

2009-04-08 20:47:02 +00:00

FlagType.pm

Bug 455583 - Bugzilla::User::can_{set,request}_flag methods should use the respective {grant,request}_group_id values instead of loading new Group object

2008-09-17 03:47:36 +00:00

Group.pm

Bug 505796 - Bugzilla::Group::grant_direct has refers to $self->{members_direct} instead of $self->{grant_direct}

2009-07-22 19:41:52 +00:00

Hook.pm

Bug 531500: Allow the mailer-before_send hook to modify the arguments passed to Email::Send

2009-12-04 14:47:37 +00:00

Install.pm

Bug 405355: Move flatten_group_membership() from User.pm to Group.pm - Patch by arbingersys <arbingersys@gmail.com> r/a=LpSolit

2009-01-25 18:49:31 +00:00

JobQueue.pm

Bug 530270: Whining fails if mail queueing is enabled - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

2009-11-22 22:26:04 +00:00

Keyword.pm

…

Mailer.pm

Bug 531500: Allow the mailer-before_send hook to modify the arguments passed to Email::Send

2009-12-04 14:47:37 +00:00

Milestone.pm

Bug 408172: [Oracle] Bug lists longer than 1000 bugs fail

2008-01-18 15:56:55 +00:00

Object.pm

Bug 515191: [SECURITY] SQL Injection via Bug.search (CVE-2009-3125) and Bug.create (CVE-2009-3165)

2009-09-11 16:14:09 +00:00

Product.pm

2009-07-01 11:06:37 +00:00

Search.pm

Bug 491467: Make Search.pm and buglist.cgi consistently take column ids for the "fields" and "order" arguments, to prevent problems with using SQL fragments in the order and columnlist.

2009-07-07 18:20:16 +00:00

Series.pm

2009-08-17 23:01:46 +00:00

Status.pm

Bug 308253: Ability to add select (enum) fields to a bug whose list of values depends on the value of another field

2008-11-07 11:34:57 +00:00

Template.pm

Bug 514703 - revert changes to bug link detection algorithm. r,a=LpSolit.

2010-01-07 15:05:38 +00:00

Token.pm

Bug 477513: md5_hex() fails if a saved search has UTF8 characters in it - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

2009-02-09 19:20:40 +00:00

Update.pm

2nd attempt to fix bug 414726: Bugzilla::Update never updates bugzilla-update.xml if the file already exists locally - Patch by me r=mkanat

2008-05-02 19:17:01 +00:00

User.pm

Bug 457657 â Make e-mail comment header localizable.

2009-06-02 22:04:19 +00:00

Util.pm

Bug 534587 - "Bugmail uses the timezone of the changee instead of the user receiving the mail" [p=reed r=mkanat a=mkanat]

2010-01-05 07:07:46 +00:00

Version.pm

Bug 373440: Make "check" into a generic function in Bugzilla::Object

2007-08-23 21:31:21 +00:00

WebService.pm

Bug 494427: Instead of sending <nil> for undef elements in the WebService, just strip the items from the return value.

2009-07-04 12:06:59 +00:00