Bug 498309: Speed up show_bug when there are many comments by caching the
results of get_text calls in Bugzilla::Template, and removing the call
to field-descs.none.tmpl from format_comment.txt.tmpl.
r=LpSolit, a=LpSolit
Remove CVS "$Id" markers in files. The CVS mirror of bzr was showing
the docs' about.xml and installation.xml being modified on every commit
because of these markers, and the rest of them are simply unnecessary.
David Lawrence [Fri, 5 Mar 2010 18:49:28 +0000 (13:49 -0500)]
Bug 513989 - large search query causing internal server error (500) but valid redirect 302 returned
Decreased CGI_URI_LIMIT to 8000 instead of 10000
a=mkanat
Some lines in the release notes started with a "[% terms" item but didn't
have [%+ on them, so the words would get crunched together, like "thisBugzilla".
Bug 538211: Make value-controlled and visibility-controlled fields behave
correctly on enter_bug.cgi when the user uses a bookmarkable template to
pre-fill values in the controller.
r=LpSolit, a=LpSolit
Bug 520993: If the "FIXED" resolution was a visibility or value controller,
then controlled fields weren't properly changing when the status changed to
RESOLVED and "FIXED" appeared as the first value in the Resolution field.
r=LpSolit, a=mkanat
Fix the data in the bzr repo to match the data in the CVS repo.
During the CVS imports into Bzr, there were some inconsistencies introduced
(mostly that files that were deleted in CVS weren't being deleted in Bzr).
So this checkin makes the bzr repo actually consistent with the CVS repo,
including fixing permissions of files.
Bug 314871: (CVE-2009-3989) [SECURITY] Prevent web browsers from accessing CVS/, contrib/, docs/, and t/ directories
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
Frédéric Buclin [Mon, 1 Feb 2010 21:21:21 +0000 (13:21 -0800)]
Bug 532493: [SECURITY] Restricting a bug to a group while moving it to another product has no effect if the group is not used by both products
Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit
Frédéric Buclin [Mon, 1 Feb 2010 20:49:32 +0000 (12:49 -0800)]
Bug 533363: [PostgreSQL] Using "Bug ID contains foo" in boolean charts or "Exclude bug numbered" charts crash PostgreSQL 8.3 and newer (non-character data types are no longer automatically cast to TEXT)
Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat
Bug 480968: Make checksetup.pl never show popup windows for errors, on Windows, to work around the error that pops up every time it tries to load DBD::Oracle.
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=Wurblzap, a=mkanat
After the checkin of bug 524603, checksetup.pl printed "No such file or directory at Bugzilla/Install/Filesystem.pm line 465" the first time the new code was run. This fixes the warning.
Bug 524603: Allow a non-root jobqueue.pl to write to data/mailer.testfile (for the "Test" mail_delivery_method)
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
Bug 531500: Allow the mailer-before_send hook to modify the arguments passed to Email::Send
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
Bug 529416: (CVE-2009-3386) [SECURITY] Dependency lists display bug aliases even for bugs the user cannot access
Patch by Dave Miller <justdave@bugzilla.org> r=LpSolit, a=mkanat
Bug 526189: Silently ignore any attempts to add an inactive group to a bug, which fixes the fact that mandatory groups were being added to bugs when changing products, even if they were inactive (not used for bugs).
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
Bug 493242: UTF-8 characters in custom field names are mangled in show_activity.cgi - Patch by Vitaly Fedrushkov <vitaly.fedrushkov@gmail.com> r/a=LpSolit
Bug 509152: Line breaks erroneously present in comments for bugs in XML format - Patch by Thomas Ehrnhoefer <thomas.ehrnhoefer@tasktop.com> r/a=LpSolit
Bug 328628: When attachments have UTF-8 characters in their name, they will now be downloaded with the correct name.
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=Wurblzap, a=mkanat
Bug 517793: Use the ENCODING parameter of Template Toolkit instead of having a custom parser object. This also fixes a memory leak on mod_perl.
Patch by Max Kanat-Alexander <mkanat@buzgilla.org> r=LpSolit, a=LpSolit
Bug 516712: Make it possible to upgrade when you have empty strings in the profiles.extern_id column
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat
Bug 516157: MySQL 6.x/5.2/5.4 uses "ENGINE", not "TYPE", for altering tables to InnoDB
Patch by Gerard J. Cerchio <gjpc@circlesoft.com> r=mkanat, a=mkanat
Bug 515991: Blacklist CGI 3.46 and 3.47 because CGI::Carp breaks Template Toolkit in those versions.
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
Bug 515191: [SECURITY] SQL Injection via Bug.search (CVE-2009-3125) and Bug.create (CVE-2009-3165)
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat
Bug 508189: (CVE-2009-3166) [SECURITY] Logging in after changing your password would expose your new password in the URL
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat
Bug 515606: Fix the arguments of Bugzilla::Job::Mailer->retry_delay--it's actually a class method, not just a subroutine
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat