mkanat%bugzilla.org cb38f60950 Bug 718319: (CVE-2012-0440) [SECURITY] JSON-RPC permits to bypass token checks and can lead to CSRF (no victim's action required) ...

r=dkl a=LpSolit


git-svn-id: svn://10.0.0.236/branches/BUGZILLA-3_6-BRANCH@263342 18797224-902f-48f8-a5cc-f745e15eee43

2012-01-31 16:19:08 +00:00

..

account

Bug 575947: Users with passwords length less than 6 characters can't login after migration from 3.4.x or older to 3.6 or newer

2010-10-14 00:53:22 +00:00

admin

Bug 604107: The link to delete the value 0 of custom fields is broken

2010-10-15 01:20:24 +00:00

attachment

Bug 545253: Do not display flags as editable when you cannot edit attachment attributes

2010-02-10 00:03:50 +00:00

bug

Bug 621105 - [SECURITY] Voting lacks CSRF protection

2011-01-24 19:53:26 +00:00

email

Bug 578003: E-mail notifications are missing datetime for comments

2010-07-12 23:34:28 +00:00

extensions

Bug 542328: Make extensions/create.pl give the extension's lib/Util.pm module a correct package name

2010-01-31 17:51:15 +00:00

flag

Bug 540042: Change flag markup to identify flag type in all cases

2010-03-29 12:32:52 +00:00

global

Bug 718319: (CVE-2012-0440) [SECURITY] JSON-RPC permits to bypass token checks and can lead to CSRF (no victim's action required)

2012-01-31 16:19:08 +00:00

list

Bug 621110: [SECURITY] Quips (adding/approving/deleting) lacks CSRF protection

2011-01-24 17:38:25 +00:00

pages

Bug 720751 - Release notes for Bugzilla 3.6.8

2012-01-27 22:17:57 +00:00

reports

The "simple format" of the duplicates table was broken by an improper backport

2011-01-25 05:31:41 +00:00

request

Bug 657158 - (CVE-2011-2381) [SECURITY] Request email headers for attachment containing newline are corrupt

2011-08-04 19:34:39 +00:00

search

Bug 621108: [SECURITY] Creating/editing charts lacks CSRF protection

2011-01-24 17:27:06 +00:00

setup

Bug 619594: (CVE-2010-4568) [SECURITY] Improve the randomness of

2011-01-24 22:07:59 +00:00

whine

Bug 511216: Assignee is blank in Whine emails - Patch by Kent Rogers <kar@cray.com> r/a=Lpsolit

2009-12-28 00:58:49 +00:00

config.js.tmpl

Bug 357904: Create an object for a Field Value and have Bugzilla::Field->legal_values use it

2008-09-24 02:55:24 +00:00

config.rdf.tmpl

Bug 610217: config.cgi?ctype=rdf should include product.allows_unconfirmed

2010-11-14 19:24:51 +00:00

filterexceptions.pl

Bug 605693: Make config.cgi?ctype=rdf faster

2010-10-20 12:19:08 +00:00

index.html.tmpl

Bug 622822 - add additional_links hook to front page. r,a=mkanat.

2011-01-05 10:50:18 +00:00

sidebar.xul.tmpl

Bug 121601: Have logout display index.cgi, not just a message on relogin.cgi.

2009-03-01 23:42:55 +00:00

welcome-admin.html.tmpl

Bug 519858 - Move uncommonly used parameters out of the "Required" section and into a "General" and "Advanced" section

2009-12-31 12:37:51 +00:00