Bommels05/Mozilla
Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Mozilla/mozilla/webtools/bugzilla/Bugzilla
History
mkanat%bugzilla.org f8bb64c9e4 Bug 600464: (CVE-2010-3172) [SECURITY] Content/Header injection due to non-random multipart/x-mixed-replace boundary 
r=mkanat a=LpSolit


git-svn-id: svn://10.0.0.236/branches/BUGZILLA-3_6-BRANCH@261506 18797224-902f-48f8-a5cc-f745e15eee43
2010-11-02 23:37:45 +00:00
..
Attachment
Bug 441921: context=file fails due to taint issues in file names and file rev numbers - Patch by Frédéric Buclin <LpSolit@gmail.com> r=himorin a=LpSolit
2008-06-29 17:38:03 +00:00
Auth
Bug 604522: t/012throwables.t doesn't catch new user errors correctly
2010-10-15 00:21:59 +00:00
Config
Bug 557806: When setting the upgrade_notification parameter, an error should be thrown if you don't have all the required Perl modules installed
2010-04-07 14:47:54 +00:00
DB
Bug 451219: Allow altering from one SERIAL type to another on PostgreSQL,
2010-07-10 04:23:40 +00:00
Field
Bug 577054: Field::Choice was denying the deletion of any value if
2010-07-23 01:50:54 +00:00
Install
Bug 419014: (CVE-2010-3764) [SECURITY] Old charts are not project specific, and product names are viewable in graphs/
2010-11-02 23:23:21 +00:00
Job
Bug 515606: Fix the arguments of Bugzilla::Job::Mailer->retry_delay--it's actually a class method, not just a subroutine
2009-09-10 23:47:27 +00:00
JobQueue
Bug 475403: A RHEL SysV Init Script for jobqueue.pl
2009-09-04 21:22:52 +00:00
Migrate
Bug 519584: Implement a framework for migrating from other bug-trackers, and start with a GNATS importer.
2009-10-24 05:31:42 +00:00
Search
Bug 585028: Advanced Shortcut for Priority (P1-5 as search word) broken
2010-09-21 18:02:13 +00:00
Template
Bug 545260: In the code for template hooks, the cached code of a hook
2010-02-17 22:47:48 +00:00
User
Bug 364161: Inefficient SQL: Selecting subclass from setting table
2008-09-05 23:03:03 +00:00
WebService
Bug 575947: Users with passwords length less than 6 characters can't login after migration from 3.4.x or older to 3.6 or newer
2010-10-14 00:53:22 +00:00
Whine
Bug 530467: Create a read-only Bugzilla::Whine::Query object and have editwhines.cgi use it
2009-12-12 22:15:43 +00:00
Attachment.pm
Bug 413648: Attachment mime type handling should strip leading and trailing spaces
2010-10-22 13:05:03 +00:00
Auth.pm
Bug 604522: t/012throwables.t doesn't catch new user errors correctly
2010-10-15 00:21:59 +00:00
Bug.pm
Bug 607966: Use of qw(...) as parentheses is deprecated since Perl 5.13.5
2010-10-28 15:35:02 +00:00
BugMail.pm
Bug 556429: Send bugmail notifications in the Perl code instead of from
2010-04-07 03:31:33 +00:00
CGI.pm
Bug 600464: (CVE-2010-3172) [SECURITY] Content/Header injection due to non-random multipart/x-mixed-replace boundary
2010-11-02 23:37:45 +00:00
Chart.pm
Bug 389396: Do not list series you cannot plot - Patch by Frédéric Buclin <LpSolit@gmail.com> r=dkl a=LpSolit
2009-08-17 23:01:46 +00:00
Classification.pm
Bug 557324: object_before_delete does not work when object is Bugzilla::Classification
2010-04-07 18:17:32 +00:00
Comment.pm
Bug 552168: Speed up comment display by pre-loading all Bugzilla::User
2010-03-14 00:46:27 +00:00
Component.pm
Bug 553266: config.cgi?ctype=rdf spends most of its time loading flagtypes from the database (partial backport)
2010-10-20 00:50:28 +00:00
Config.pm
Bug 434801: [SECURITY] .htaccess doesn't prevent reading old-params.txt from the web - Patch by Reed Loden <reed@reedloden.com> r=mkanat a=LpSolit
2010-02-01 00:50:15 +00:00
Constants.pm
Bug 419014: (CVE-2010-3764) [SECURITY] Old charts are not project specific, and product names are viewable in graphs/
2010-11-02 23:23:21 +00:00
DB.pm
Bug 578494: We can't use "shellwords" to split words for sql_fulltext on Pg,
2010-08-02 01:34:28 +00:00
Error.pm
Bug 554714: Make JSON-RPC throw errors properly even if they are thrown
2010-04-01 01:17:35 +00:00
Extension.pm
Fix some typos and formatting in the Bugzilla::Extension POD.
2010-03-08 01:33:57 +00:00
Field.pm
Bug 557686: PostgreSQL crashes when deleting a custom field of type Date/Time
2010-04-07 01:18:54 +00:00
Flag.pm
Bug 552167: show_bug.cgi loads flagtypes from the database for each attachment
2010-03-30 22:05:25 +00:00
FlagType.pm
Bug 455583 - Bugzilla::User::can_{set,request}_flag methods should use the respective {grant,request}_group_id values instead of loading new Group object
2008-09-17 03:47:36 +00:00
Group.pm
Bug 252005: Allow changing the captialization of a group name
2010-06-22 02:34:17 +00:00
Hook.pm
Bug 587793: Add a new "object_end_of_create" hook so that extensions can
2010-09-01 23:06:21 +00:00
Install.pm
Bug 519858 - Move uncommonly used parameters out of the "Required" section and into a "General" and "Advanced" section
2009-12-31 12:37:51 +00:00
JobQueue.pm
Bug 530270: Whining fails if mail queueing is enabled - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit
2009-11-22 22:26:04 +00:00
Keyword.pm
Bug 509045: Make "use_keywords" a global template variable instead of having to pass it to templates all the time
2009-08-11 04:34:22 +00:00
Mailer.pm
Bug 531500: Allow the mailer_before_send hook to modify the arguments passed to Email::Send
2009-12-04 14:46:45 +00:00
Migrate.pm
Fix POD of Bugzilla::Migrate to be consistent with reality (it was slightly
2009-11-17 21:16:08 +00:00
Milestone.pm
Bug 408172: [Oracle] Bug lists longer than 1000 bugs fail
2008-01-18 15:56:55 +00:00
Object.pm
Bug 587793: Add a new "object_end_of_create" hook so that extensions can
2010-09-01 23:06:21 +00:00
Product.pm
Bug 556429: Send bugmail notifications in the Perl code instead of from
2010-04-07 03:31:33 +00:00
Search.pm
Bug 584414: Searching for bugs with "at least X votes" was broken in 3.6 only.
2010-09-08 01:50:13 +00:00
Series.pm
Bug 302542: Implement the ability to delete data sets (series) in New Charts - Patch by Frédéric Buclin <LpSolit@gmail.com> r=gerv a=LpSolit
2009-10-04 21:00:26 +00:00
Status.pm
Bug 512606: Make statuses currently available for the user to change this bug to be controlled by Bugzilla::Bug, not the template
2009-12-12 21:55:15 +00:00
Template.pm
Bug 605425: Non-english templates are no longer precompiled by checksetup
2010-10-20 23:17:10 +00:00
Token.pm
Bug 527586: Use X-Forwarded-For instead of REMOTE_ADDR for trusted proxies
2009-12-31 12:53:21 +00:00
Update.pm
Fix bustage in 012throwables.t
2010-02-20 21:17:24 +00:00
User.pm
Bug 533018: "Confirm match" displays full email address to logged-out users in request.cgi
2010-02-18 00:36:20 +00:00
Util.pm
Bug 556439: Prevent datetime_from from dying if it gets 0000-00-00 as a
2010-04-02 23:47:51 +00:00
Version.pm
Bug 471871: Bugzilla::Version has duplicated code compared to Bugzilla::Object (make Bugzilla::Version really a subclass of Bugzilla::Object) - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat
2009-04-10 09:36:46 +00:00
WebService.pm
Bug 550618: Make the XML-RPC WebService return the right date format
2010-03-08 07:47:34 +00:00