mkanat%bugzilla.org 2d76acd475 Bug 621105 - [SECURITY] Voting lacks CSRF protection ...

r=mkanat,a=LpSolit


git-svn-id: svn://10.0.0.236/branches/BUGZILLA-3_6-BRANCH@261814 18797224-902f-48f8-a5cc-f745e15eee43

2011-01-24 19:53:26 +00:00

..

activity

Bug 533927 - "email address domain filtering is applying to non-email fields in the history"

2010-03-28 04:33:12 +00:00

create

Bug 627854: Add 'form' hook to create-guided.html.tmpl similar to create.html.tmpl

2011-01-21 21:50:19 +00:00

process

Bug 591218 - Add missing 'longdesclength' form field to fix problem when receiving a mid-air after selecting "Submit only my new comment" on mid-air page.

2010-08-28 08:51:22 +00:00

votes

Bug 621105 - [SECURITY] Voting lacks CSRF protection

2011-01-24 19:53:26 +00:00

choose.html.tmpl

…

comments.html.tmpl

Bug 524254: Make the comment box in bug/edit.html.tmpl into a BLOCK

2009-12-13 22:47:34 +00:00

dependency-graph.html.tmpl

…

dependency-tree.html.tmpl

Bug 512623: Change get_status and get_resolution to display_value everywhere.

2009-09-30 22:35:47 +00:00

edit.html.tmpl

Bug 619588: (CVE-2010-4567) [SECURITY] Safety checks that disallow clicking for javascript: or data: URLs in the URL field can be evaded with prefixed whitespace

2011-01-24 18:53:58 +00:00

field-events.js.tmpl

Bug 463598: Improve the performance of the JavaScript that adjusts field values based on the value of another field

2009-06-21 19:33:49 +00:00

field.html.tmpl

Bug 525617: Template Hook for bug/field.html.tmpl

2009-11-09 19:12:53 +00:00

format_comment.txt.tmpl

Bug 499151: Only call format_comment when it's actually needed, as a slight

2010-02-20 20:03:56 +00:00

knob.html.tmpl

Bug 512606: Make statuses currently available for the user to change this bug to be controlled by Bugzilla::Bug, not the template

2009-12-12 21:55:15 +00:00

navigate.html.tmpl

Do requested checkin fixes for bug 509108.

2009-08-12 01:46:01 +00:00

show-header.html.tmpl

Bug 530009: Put the template header stuff required to display show_bug all in one place

2009-12-07 19:12:01 +00:00

show-multiple.html.tmpl

Bug 619588: (CVE-2010-4567) [SECURITY] Safety checks that disallow clicking for javascript: or data: URLs in the URL field can be evaded with prefixed whitespace

2011-01-24 18:53:58 +00:00

show.html.tmpl

Bug 530009: Put the template header stuff required to display show_bug all in one place

2009-12-07 19:12:01 +00:00

show.xml.tmpl

Bug 452919: Allow the "created an attachment" message in comments to be localized

2009-12-04 14:28:49 +00:00

summarize-time.html.tmpl

Bug 512623: Change get_status and get_resolution to display_value everywhere.

2009-09-30 22:35:47 +00:00

time.html.tmpl

…