Mozilla

Attachment

Bug 637981: (CVE-2011-2379) [SECURITY] "Raw Unified" patch diffs can cause XSS on this domain in IE 6-8 and Safari

2011-08-04 20:49:57 +00:00

Auth

Bug 604522: t/012throwables.t doesn't catch new user errors correctly

2010-10-15 00:21:59 +00:00

Config

Add missing documentation. r=mkanat.

2011-01-27 12:06:49 +00:00

DB

Remove tabs and fix some formatting in Bugzilla::DB::Pg.

2011-02-14 20:36:14 +00:00

Field

Bug 577054: Field::Choice was denying the deletion of any value if

2010-07-23 01:50:54 +00:00

Install

Bug 646578: Make Math::Random::Secure fail to install if its dependencies

2011-04-27 22:22:46 +00:00

Job

Bug 515606: Fix the arguments of Bugzilla::Job::Mailer->retry_delay--it's actually a class method, not just a subroutine

2009-09-10 23:47:27 +00:00

JobQueue

Bug 475403: A RHEL SysV Init Script for jobqueue.pl

2009-09-04 21:22:52 +00:00

Migrate

Bug 519584: Implement a framework for migrating from other bug-trackers, and start with a GNATS importer.

2009-10-24 05:31:42 +00:00

Search

Bug 611623: The alias is not filtered in QuickSearch when passed to show_bug.cgi

2010-11-13 00:20:10 +00:00

Template

Bug 545260: In the code for template hooks, the cached code of a hook

2010-02-17 22:47:48 +00:00

User

Bug 364161: Inefficient SQL: Selecting subclass from setting table

2008-09-05 23:03:03 +00:00

WebService

Bug 718319: (CVE-2012-0440) [SECURITY] JSON-RPC permits to bypass token checks and can lead to CSRF (no victim's action required)

2012-01-31 16:19:08 +00:00

Whine

Bug 530467: Create a read-only Bugzilla::Whine::Query object and have editwhines.cgi use it

2009-12-12 22:15:43 +00:00

Attachment.pm

Bug 660502: (CVE-2011-2977) [SECURITY] Temporary files for uploaded attachments are not deleted on Windows

2011-08-04 20:33:34 +00:00

Auth.pm

Bug 707594: Fix broken account lockout notifications

2011-12-05 16:48:52 +00:00

Bug.pm

Bug 653477: (CVE-2011-2380) [SECURITY] Group names can be guessed when creating or editing a bug

2011-08-04 20:20:54 +00:00

BugMail.pm

Bug 556429: Send bugmail notifications in the Perl code instead of from

2010-04-07 03:31:33 +00:00

CGI.pm

Bug 600464: (CVE-2010-3172) [SECURITY] Content/Header injection due to non-random multipart/x-mixed-replace boundary

2010-11-02 23:37:45 +00:00

Chart.pm

Bug 697699 - (CVE-2011-3657) [SECURITY] XSS when viewing new charts or tabular and graphical reports in debug mode

2011-12-28 22:03:37 +00:00

Classification.pm

Bug 557324: object_before_delete does not work when object is Bugzilla::Classification

2010-04-07 18:17:32 +00:00

Comment.pm

Bug 552168: Speed up comment display by pre-loading all Bugzilla::User

2010-03-14 00:46:27 +00:00

Component.pm

Bug 553266: config.cgi?ctype=rdf spends most of its time loading flagtypes from the database (partial backport)

2010-10-20 00:50:28 +00:00

Config.pm

Bug 434801: [SECURITY] .htaccess doesn't prevent reading old-params.txt from the web - Patch by Reed Loden <reed@reedloden.com> r=mkanat a=LpSolit

2010-02-01 00:50:15 +00:00

Constants.pm

Bump the version number post-release

2012-02-01 00:04:54 +00:00

DB.pm

Bug 578494: We can't use "shellwords" to split words for sql_fulltext on Pg,

2010-08-02 01:34:28 +00:00

Error.pm

Bug 554714: Make JSON-RPC throw errors properly even if they are thrown

2010-04-01 01:17:35 +00:00

Extension.pm

Fix some typos and formatting in the Bugzilla::Extension POD.

2010-03-08 01:33:57 +00:00

Field.pm

Bug 557686: PostgreSQL crashes when deleting a custom field of type Date/Time

2010-04-07 01:18:54 +00:00

Flag.pm

Bug 552167: show_bug.cgi loads flagtypes from the database for each attachment

2010-03-30 22:05:25 +00:00

FlagType.pm

Bug 455583 - Bugzilla::User::can_{set,request}_flag methods should use the respective {grant,request}_group_id values instead of loading new Group object

2008-09-17 03:47:36 +00:00

Group.pm

Bug 252005: Allow changing the captialization of a group name

2010-06-22 02:34:17 +00:00

Hook.pm

Bug 596611: Add a hook to email_in.pl

2010-11-04 17:23:45 +00:00

Install.pm

Bug 519858 - Move uncommonly used parameters out of the "Required" section and into a "General" and "Advanced" section

2009-12-31 12:37:51 +00:00

JobQueue.pm

Bug 530270: Whining fails if mail queueing is enabled - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

2009-11-22 22:26:04 +00:00

Keyword.pm

Bug 509045: Make "use_keywords" a global template variable instead of having to pass it to templates all the time

2009-08-11 04:34:22 +00:00

Mailer.pm

Bug 531500: Allow the mailer_before_send hook to modify the arguments passed to Email::Send

2009-12-04 14:46:45 +00:00

Migrate.pm

Fix POD of Bugzilla::Migrate to be consistent with reality (it was slightly

2009-11-17 21:16:08 +00:00

Milestone.pm

…

Object.pm

Bug 587793: Add a new "object_end_of_create" hook so that extensions can

2010-09-01 23:06:21 +00:00

Product.pm

Bug 556429: Send bugmail notifications in the Perl code instead of from

2010-04-07 03:31:33 +00:00

Search.pm

Bug 490322: Make "allwords" work with the keywords field, again.

2011-02-15 05:48:11 +00:00

Series.pm

Bug 302542: Implement the ability to delete data sets (series) in New Charts - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=gerv a=LpSolit

2009-10-04 21:00:26 +00:00

Status.pm

Bug 512606: Make statuses currently available for the user to change this bug to be controlled by Bugzilla::Bug, not the template

2009-12-12 21:55:15 +00:00

Template.pm

Bug 657158 - (CVE-2011-2381) [SECURITY] Request email headers for attachment containing newline are corrupt

2011-08-04 19:34:39 +00:00

Token.pm

Bug 527586: Use X-Forwarded-For instead of REMOTE_ADDR for trusted proxies

2009-12-31 12:53:21 +00:00

Update.pm

Fix bustage in 012throwables.t

2010-02-20 21:17:24 +00:00

User.pm

Bug 711714: (CVE-2011-3667) [SECURITY] The User.offer_account_by_email WebService method lets you create new user accounts independently of the value of Bugzilla::Auth::Verify::*::user_can_create_account

2011-12-28 22:21:31 +00:00

Util.pm

Bug 714472: (CVE-2012-0448) [SECURITY] utf8 homoglyphs are allowed in email addresses, which could allow an attacker to be CC'ed to private bugs by accident

2012-01-31 16:08:48 +00:00

Version.pm

Bug 471871: Bugzilla::Version has duplicated code compared to Bugzilla::Object (make Bugzilla::Version really a subclass of Bugzilla::Object) - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r/a=mkanat

2009-04-10 09:36:46 +00:00

WebService.pm

Bug 550618: Make the XML-RPC WebService return the right date format

2010-03-08 07:47:34 +00:00