Bug 250897: Enforce a 10 minute waiting period between password reset attempts to prevent the user getting mailbombed if the form is
submitted multiple times.
Patch by Joel Peshkin <bugreport@peshkin.net>
r=kiko, a=justdave
Patch for bug 251338: Installation section should mention that you need an MTA installed; patch by Colin S. Ogilvie <colin.ogilvie@gmail.com>; r=vladd, a=justdave.
Patch for bug 263165: Make Bugzilla specify table type as MyISAM when creating tables; patch by Byron Jones (glob) <bugzilla@glob.com.au>, r=kiko, a=justdave.
Patch for bug 240079: fix strange phrase in the documentation: "everywhere applicable" should be "where applicable" in README.docs; patch by Niels Reedijk <n.reedijk@planet.nl>; r=timeless; a=justdave.
Bug 117297: Corrects a situation where email addresses got mailed to twice when adding a user to the CC list if the same case isn't used as what's stored in the database for that user.
Patch by Thomas Stromberg <thomas+mozilla@stromberg.org>
r= jouni, a=justdave
Bug 232097: Use an entity reference for the landfill base URL in the demos, to make it easy to change each release. Original
patch by Colin Ogilvie <bmo@colino.co.uk>, backported to the 2.16 docs by me.
Removing the txt and html directories, so the website and tarball builds can auto-build the docs at checkout time (so they don't have to be constantly checked out and rebuilt)
Patch for bug 236567: Update the documentation describing the Perl modules installation on Windows using ppm; patch by Andrei Benea <abenea@home.ro>; r=kiko, a=justdave.
Patch for bug 137121: modify the way in which headers are printed in order to avoid printing them twice when reporting an error in createaccount.cgi; r=jouni, a=justdave.
Branch fix for bug 181106: edit-multiple.html.tmpl uses &apos which
Internet Explorer cannot use. Changed the entity in the template to a
literal apostrophe. r=gerv, a=justdave.
Bug 224815: The check-in for bug 212095 (which fixed a forward-compatibility problem with DBD::mysql) created a backward compatibility issue with DBI (unintentionally bumped the required minimum DBI version). This checkin puts the proper code in place to allow the minimum stated DBI according to the Bugzilla 2.16 documentation as well as the current DBI version as of this writing.
r= myk, bbaetz a= justdave
Applied changed by hand to this file so they'll show up on the website... my docbook environment is busted right now so I
can't compile it the usual way.
Bug 228706: Fixes invalid expiration dates on almost all of the cookies. Amazingly it mostly worked before. It'll work better now. :)
r= myk, a= justdave
Bug 227513: Add text to shadowdb param description to indicate that the privileges to access the shadowdb must be granted from MySQL prior to entering the shadowdb name in the param.
r= myk, a= justdave
Bug 121419: Use the most-specific cookie if more than one exists with different cookiepaths. Should help ease login troubles related to the cookiepath setting.
Patch by Joel Peshkin <bugreport@peshkin.net>
r= bbaetz, a= justdave
Bug 225474: Fixing regression from bug 217422, xml.cgi got busted, and the patch from bug 217422 (MySQL 4 compatibility for show_bug) didn't accomplish what it was supposed to anyway. This checkin fixes both.
r= bbaetz, a= justdave
[SECURITY] Bug 219690: When deleting products and the 'usebuggroups' parameter is on, the privilege which allows someone to add people to the group which is being deleted does not get removed, allowing people with that privilege to get that privilege for the next group that is created which reuses that group ID. Note that this only allows someone who had been granted privileges in the past to retain them.
Patch by Stefan Mayr <S.Mayr2@cadenas.de>
r= justdave, joel a= justdave
[SECURITY] Bug 219044: A user with 'editkeywords' privileges (i.e. usually an administrator) can inject arbitrary SQL via the URL used to edit an existing keyword.
Patch by Joel Peshkin <bugreport@peshkin.net>
r= justdave, zach a= justdave
[SECURITY] Bug 214290: A user with 'editproducts' privileges (i.e. usually an administrator) can select arbitrary SQL to be run by the nightly statistics cron job (collectstats.pl), by giving a product a special name.
Patch by Dave Miller <justdave@bugzilla.org>
r= gerv, bbaetz a= justdave
[SECURITY] Bug 209376: If you know the email address of someone who has voted on a secure bug, you can access the summary of that bug even if you do not have sufficient permissions to view the bug itself.
Patch by Gervase Markham <gerv@mozilla.org>
r= justdave, bbaetz a= justdave
Bug 160422: If versioncache isn't readable, pretend it doesn't exist and recreate it. This tends to happen after cron jobs run as a user other than the webserver.
r=myk, a=justdave
Bug 146087 - 'sendmailnow' should be on by default. Original patch by jocuri@softhome.net (Vlad Dascalu), updated patch by me; r=justdave/preed, a=justdave(ish)
projects / thirdparty / bugzilla.git / log
