Patch for bug 137121: modify the way in which headers are printed in order to avoid printing them twice when reporting an error in createaccount.cgi; r=jouni, a=justdave.
Branch fix for bug 181106: edit-multiple.html.tmpl uses &apos which
Internet Explorer cannot use. Changed the entity in the template to a
literal apostrophe. r=gerv, a=justdave.
Bug 224815: The check-in for bug 212095 (which fixed a forward-compatibility problem with DBD::mysql) created a backward compatibility issue with DBI (unintentionally bumped the required minimum DBI version). This checkin puts the proper code in place to allow the minimum stated DBI according to the Bugzilla 2.16 documentation as well as the current DBI version as of this writing.
r= myk, bbaetz a= justdave
Applied changed by hand to this file so they'll show up on the website... my docbook environment is busted right now so I
can't compile it the usual way.
Bug 228706: Fixes invalid expiration dates on almost all of the cookies. Amazingly it mostly worked before. It'll work better now. :)
r= myk, a= justdave
Bug 227513: Add text to shadowdb param description to indicate that the privileges to access the shadowdb must be granted from MySQL prior to entering the shadowdb name in the param.
r= myk, a= justdave
Bug 121419: Use the most-specific cookie if more than one exists with different cookiepaths. Should help ease login troubles related to the cookiepath setting.
Patch by Joel Peshkin <bugreport@peshkin.net>
r= bbaetz, a= justdave
Bug 225474: Fixing regression from bug 217422, xml.cgi got busted, and the patch from bug 217422 (MySQL 4 compatibility for show_bug) didn't accomplish what it was supposed to anyway. This checkin fixes both.
r= bbaetz, a= justdave
[SECURITY] Bug 219690: When deleting products and the 'usebuggroups' parameter is on, the privilege which allows someone to add people to the group which is being deleted does not get removed, allowing people with that privilege to get that privilege for the next group that is created which reuses that group ID. Note that this only allows someone who had been granted privileges in the past to retain them.
Patch by Stefan Mayr <S.Mayr2@cadenas.de>
r= justdave, joel a= justdave
[SECURITY] Bug 219044: A user with 'editkeywords' privileges (i.e. usually an administrator) can inject arbitrary SQL via the URL used to edit an existing keyword.
Patch by Joel Peshkin <bugreport@peshkin.net>
r= justdave, zach a= justdave
[SECURITY] Bug 214290: A user with 'editproducts' privileges (i.e. usually an administrator) can select arbitrary SQL to be run by the nightly statistics cron job (collectstats.pl), by giving a product a special name.
Patch by Dave Miller <justdave@bugzilla.org>
r= gerv, bbaetz a= justdave
[SECURITY] Bug 209376: If you know the email address of someone who has voted on a secure bug, you can access the summary of that bug even if you do not have sufficient permissions to view the bug itself.
Patch by Gervase Markham <gerv@mozilla.org>
r= justdave, bbaetz a= justdave
Bug 160422: If versioncache isn't readable, pretend it doesn't exist and recreate it. This tends to happen after cron jobs run as a user other than the webserver.
r=myk, a=justdave
Bug 146087 - 'sendmailnow' should be on by default. Original patch by jocuri@softhome.net (Vlad Dascalu), updated patch by me; r=justdave/preed, a=justdave(ish)
Bug 194394: Someone listed as QA contact on a bug could still access a bug with QA contact privileges if "useqacontact" was later disabled via the parameters.
Patch by Brad Baetz <bbaetz@acm.org>
r= justdave
a= justdave
Bug 192677: Add new test to flag failure-to-filter situations in the templates, and correct the XSS holes that were discovered as a result of it.
Filter patch by Gervase Markham <gerv@mozilla.org>
Template patches by Gervase Markham <gerv@mozilla.org> and Dave Miller <justdave@netscape.com>
r= gerv, bbaetz, justdave
a= justdave
The source files for the Bugzilla Guide have long been using the XML version of DocBook but still residing in the sgml/ directory with an extension of .sgml.
In an effort to maintain CVS history, the raw files were copied on the CVS server to the xml/ directory and renamed to have .xml for the extension; any checkins before this one did have the .sgml extension.
bbaetz%acm.org [Sun, 16 Mar 2003 14:19:34 +0000 (14:19 +0000)]
Bug 197180 - long component name not flagged as error
Because of a mismatch between the size of bugs.component and
components.program, this caused silent failures when creating/moving bugs
in that component.
r/a=justdave
Updating template testing infrastructure to match all of the tests performed on the trunk (which are still compatible with 2.16). The main benefit is if someone drops in a localized template pack, the tests will also test the localized templates instead of only the English ones. (no bug number)
Bug 188757 - 2.16 shipped with the problem mentioned in bug 174255 and that fix was never ported to 2.16's documentation, so the error was still on bugzilla.org.
projects / thirdparty / bugzilla.git / log
