]>
git.ipfire.org Git - thirdparty/bugzilla.git/log
Dave Miller [Fri, 6 Sep 2024 07:16:46 +0000 (03:16 -0400)]
bump version to 5.3.3+ post-release
Dave Miller [Thu, 5 Sep 2024 09:41:32 +0000 (05:41 -0400)]
followup to Bug
1880288 : fix missing semicolon
Dave Miller [Tue, 3 Sep 2024 16:00:51 +0000 (12:00 -0400)]
bump version to 5.3.3 for release
Dave Miller [Thu, 29 Aug 2024 11:01:23 +0000 (07:01 -0400)]
Bug
1880288 : Noncharacters in comments cause bugmail sending to fail
Dave Miller [Thu, 29 Aug 2024 11:00:59 +0000 (07:00 -0400)]
Bug
1813629 : Prevent Auth plugins from authenticating usernames with unicode variants
Co-authored-by: David Lawrence <dkl@mozilla.com>
Dave Miller [Thu, 29 Aug 2024 11:00:22 +0000 (07:00 -0400)]
Bug
1439260 : XSS in chart.cgi and report.cgi
Dave Miller [Sat, 11 May 2024 18:15:19 +0000 (14:15 -0400)]
Bug
1526703 - Increase the size of the flagtype id column (#176)
Co-authored-by: Dylan William Hardison <dylan@hardison.net>
Dave Miller [Sat, 11 May 2024 18:12:59 +0000 (14:12 -0400)]
Bug
1851352 : Missing Email::Address dependency (#175)
Dave Miller [Sun, 28 Apr 2024 04:44:26 +0000 (00:44 -0400)]
Bug
1851354 : blocklist MySQL 8+, offer MariaDB (#143)
Dave Miller [Sat, 18 Nov 2023 08:30:54 +0000 (03:30 -0500)]
Bug
1560873 : require Template-Toolkit 3.008 (#132)
Dave Miller [Sat, 9 Sep 2023 05:17:27 +0000 (01:17 -0400)]
[no bug] Bump version number to 5.3.2+ to avoid confusion with 5.2 branch
Ali Alnubani [Wed, 11 Jan 2023 04:49:11 +0000 (06:49 +0200)]
Bug
1657496 : correctly handle MIME type on single-part email (#126)
Backported from
6765ab04774eebf8ea0bd063566240b24ac28f15 .
Perl Tidy [Wed, 5 Dec 2018 21:00:32 +0000 (16:00 -0500)]
no bug - reformat all the code using the new perltidy rules
David Lawrence [Fri, 16 Feb 2018 19:25:31 +0000 (14:25 -0500)]
Bumped version post-release
David Lawrence [Fri, 16 Feb 2018 16:52:46 +0000 (11:52 -0500)]
Bumped version to 5.1.2
Dylan William Hardison [Fri, 16 Feb 2018 16:51:58 +0000 (11:51 -0500)]
Bug
1433400 (CVE-2018-5123) Prevent cross-site image requests from leaking contents of certain fields due to regex search
r=jfearn,a=dylan
Chris Dumez [Tue, 13 Feb 2018 18:35:31 +0000 (10:35 -0800)]
<option> used when no flag is set is displayed as 'X' in Safari (#47)
After https://github.com/bugzilla/bugzilla/commit/
7d0c10e71498f2909f466fc0ccda1890595bd3ff ,
the <option> used when no flag is set is displayed as 'X' in Safari. This is because WebKit
displays the label when provided as per the latest HTML specification:
- https://html.spec.whatwg.org/multipage/rendering.html#the-select-element-2
- https://html.spec.whatwg.org/multipage/forms.html#concept-option-label
Chrome/Blink also display the label in standards mode, but not in quirks mode. The proposed
fix is to use a whitespace as label instead of 'X'. This renders as empty in Firefox / Chrome
and Safari and is still recognized as valid HTML as per https://validator.w3.org.
klemens [Tue, 9 Jan 2018 19:13:37 +0000 (14:13 -0500)]
Bug
1428580 - Various spelling fixes. r=mcote
ku3nsting [Sat, 20 May 2017 20:31:04 +0000 (13:31 -0700)]
Bug
1271907
Docs about installing full perl dependents missing "."
Gervase Markham [Fri, 8 Sep 2017 11:07:47 +0000 (12:07 +0100)]
Bug
1398100 - tiny tweaks to release notes
Emmanuel Seyman [Wed, 5 Jul 2017 16:09:11 +0000 (12:09 -0400)]
Bug
1287601 - Update my email address in the .mailmap file
Gervase Markham [Thu, 25 May 2017 13:41:05 +0000 (14:41 +0100)]
Bug
1314854 : Integrate POD in to REST docs. Update .gitignore.
Jeff Fearn [Thu, 25 May 2017 13:22:46 +0000 (14:22 +0100)]
Bug
1314854 : Integrate POD in to REST docs.
Dylan William Hardison [Sun, 26 Feb 2017 01:32:59 +0000 (01:32 +0000)]
Bug
1291006 - Under PSGI/Plack, non-existing files lead to index.cgi
Dylan William Hardison [Sat, 25 Feb 2017 18:29:44 +0000 (18:29 +0000)]
Bug
1272673 - make app.psgi runnable
Dylan William Hardison [Mon, 6 Mar 2017 00:50:01 +0000 (19:50 -0500)]
Bug
1342795 - When urlbase is https, force the secure flag to be set on cookies.
Christophe JAILLET [Sat, 11 Mar 2017 21:00:07 +0000 (16:00 -0500)]
Bug
1254514 - Navigation in dependency tree lose hide_resolved parameter
r=dylan, a=dylan
Dylan William Hardison [Mon, 27 Feb 2017 18:29:41 +0000 (18:29 +0000)]
more debugging for the benefit of taskcluster
Dylan William Hardison [Mon, 27 Feb 2017 17:55:04 +0000 (17:55 +0000)]
fix one test and add diagnostics to other
Dylan William Hardison [Mon, 27 Feb 2017 03:33:19 +0000 (03:33 +0000)]
fix another error
Dylan William Hardison [Mon, 27 Feb 2017 03:26:53 +0000 (03:26 +0000)]
alias_in_use error message test
Gervase Markham [Sun, 26 Feb 2017 02:54:49 +0000 (02:54 +0000)]
Bug
1174341 - only treat emphasis markdown based on spaces
Dylan William Hardison [Sun, 26 Feb 2017 02:20:14 +0000 (02:20 +0000)]
only call Bugzilla::Bug->CLEANUP if Bugzilla::Bug is loaded.
Dylan William Hardison [Sun, 11 Sep 2016 14:10:35 +0000 (10:10 -0400)]
Bug
1301951 - Fix Bugzilla::Bug memory leaks
Simon Green [Thu, 23 Feb 2017 08:46:20 +0000 (21:46 +1300)]
Bug
1299141 - Duplicate accesskey="c" on query.cgi
David Lawrence [Wed, 22 Feb 2017 13:23:20 +0000 (13:23 +0000)]
- Adding .taskcluster.yml file to support new Taskcluster/Github integration for CI testing
Dylan William Hardison [Fri, 23 Dec 2016 01:35:20 +0000 (20:35 -0500)]
Bug
1301383 - Memoize does not work under threaded perl in windows: "Anonymous function called in forbidden scalar context"
Christophe JAILLET [Thu, 16 Feb 2017 21:39:50 +0000 (21:39 +0000)]
Bug
1249561 - Description of 'letsubmitterchoosepriority' is misleading
r=dkl
Matthew Noorenberghe [Mon, 23 Jan 2017 03:38:42 +0000 (19:38 -0800)]
Bug
1332976 - Include quicksearch query string in the buglist.cgi HTML title. r=dylan
Emmanuel Seyman [Wed, 28 Dec 2016 21:45:55 +0000 (16:45 -0500)]
Bug
1288737 - Add CONTRIBUTING.md file to Bugzilla repo
r/a=dylan
Ujjwal Sharma [Thu, 15 Dec 2016 10:31:53 +0000 (16:01 +0530)]
Fix Bug #
1287265
This commit fixes bug #
1287265 .
https://bugzilla.mozilla.org/show_bug.cgi?id=
1287265
Dylan William Hardison [Fri, 23 Dec 2016 01:24:31 +0000 (20:24 -0500)]
Bug
1325425 - checksetup.pl on windows should ensure $/ is "\r\n"
r=dkl,a=dylan
Albert Ting [Fri, 16 Dec 2016 18:20:14 +0000 (18:20 +0000)]
Bug 521536 - Allow user search by external id when using env authentication
r=dkl,a=dkl
David Lawrence [Wed, 30 Nov 2016 21:16:12 +0000 (21:16 +0000)]
Merge branch 'tvau-patch-1'
* tvau-patch-1:
Bug
1317777 - REST API 1.0 - datetime inputs cause server error
David Lawrence [Wed, 30 Nov 2016 21:12:11 +0000 (21:12 +0000)]
Merge branch 'patch-1' of https://github.com/tvau/bugzilla into tvau-patch-1
* 'patch-1' of https://github.com/tvau/bugzilla:
Bug
1317777 - REST API 1.0 - datetime inputs cause server error
David Lawrence [Wed, 30 Nov 2016 21:08:12 +0000 (21:08 +0000)]
Merge branch 'DierickxD71-patch-1'
* DierickxD71-patch-1:
Timetrack fields, "Orig Est."+"Hours Left", accept numbers with commas or point
tvau [Tue, 15 Nov 2016 20:13:00 +0000 (21:13 +0100)]
Bug
1317777 - REST API 1.0 - datetime inputs cause server error
Use datetime_format_inbound from Bugzilla::API::1_0::Util package.
Danny Dierickx [Tue, 8 Nov 2016 13:31:52 +0000 (14:31 +0100)]
Timetrack fields, "Orig Est."+"Hours Left", accept numbers with commas or point
For non-US locales the bug entry/update page shows values with commas as decimal seperator in the timetracking fields "Orig Est." and "Hours Left". However when saving/updating bugzilla refuses these values. (see bug
1122419 )
These 2 changed lines let bugzilla accept/process these "comma-values" as "point-values".
This patch *should* not influence systems with US locale.
Simon Green [Sun, 30 Oct 2016 04:55:23 +0000 (14:55 +1000)]
Bug 228444 - Checking for unquoted non regex variable interpolated into regex
Simon Green [Sun, 30 Oct 2016 04:53:25 +0000 (14:53 +1000)]
Bug 331007 - alias_in_use doesn't acknowledge that you could remove the alias from the other bug
Dylan William Hardison [Wed, 19 Oct 2016 15:36:29 +0000 (11:36 -0400)]
fix typo
Dylan William Hardison [Wed, 19 Oct 2016 13:03:24 +0000 (09:03 -0400)]
Revert "Bug
1306534 - Crash when pasting UTF8 text as an attachment"
This reverts commit
f1b9ed5d96a4738471559c9a275eabc4333d74f4 .
Dylan William Hardison [Thu, 13 Oct 2016 14:28:08 +0000 (10:28 -0400)]
Bug
1309884 - constants.CONCATENATE_ASSETS gets constant folded when true
Frédéric Buclin [Mon, 17 Oct 2016 21:40:21 +0000 (21:40 +0000)]
Bug
1310728 - editflagtypes.cgi crashes when classifications are enabled and the user hasn't global editcomponents privs
r=dkl
Ryan Wilson [Fri, 14 Oct 2016 22:19:28 +0000 (18:19 -0400)]
Bug
1306455 - Group icons are badly displayed in bug comments
r=dylan
Dylan Hardison [Fri, 14 Oct 2016 22:10:59 +0000 (18:10 -0400)]
Bug
1308949 - Keep MYMETA.json up-to-date when checksetup is run
r=dkl
dklawren [Fri, 14 Oct 2016 16:39:09 +0000 (12:39 -0400)]
Merge pull request #30 from kyoshino/bug-
1309737 -user-agent
Bug
1309737 - Add User-Agent to the Access-Control-Allow-Headers header
Dylan William Hardison [Thu, 13 Oct 2016 22:55:34 +0000 (18:55 -0400)]
nit: doc fail
Dylan William Hardison [Thu, 13 Oct 2016 00:41:36 +0000 (17:41 -0700)]
Bug
1301887 - File::Slurp triggers warnings on perl 5.24 and it is recommended to not use it (#21)
r=mtyson
Kohei Yoshino [Thu, 13 Oct 2016 00:11:48 +0000 (20:11 -0400)]
Bug
1309737 - Add User-Agent to the Access-Control-Allow-Headers header
David Lawrence [Wed, 12 Oct 2016 21:45:15 +0000 (21:45 +0000)]
Bug
1307003 - Add whoami endpoint
r=dylan
Emma Humphries [Wed, 12 Oct 2016 18:11:54 +0000 (14:11 -0400)]
Bug
1309649 - Add longdescs.count to table of fields in the documentation for search.
r=dylan
Dylan William Hardison [Wed, 12 Oct 2016 14:24:58 +0000 (10:24 -0400)]
Revert "Bug 711655 - 'reply' JS should insert at caret position"
This reverts commit
b0f5a16ece2ae97d5ebec0c36aed4f965b162398 .
Matt Tyson [Tue, 11 Oct 2016 23:07:32 +0000 (19:07 -0400)]
Bug
1306534 - Crash when pasting UTF8 text as an attachment
r=dylan
Anamika_07 [Tue, 11 Oct 2016 22:56:07 +0000 (18:56 -0400)]
Bug 711655 - 'reply' JS should insert at caret position
r=dylan
Dylan William Hardison [Tue, 11 Oct 2016 21:17:01 +0000 (17:17 -0400)]
Bug
1309278 - Cache::Memcached::Fast returns tainted data if the key is tainted
r=dkl
Dylan William Hardison [Sat, 8 Oct 2016 17:09:18 +0000 (13:09 -0400)]
nit: wrong method call in Bugzilla::Migrate
Dylan William Hardison [Sat, 8 Oct 2016 17:01:39 +0000 (10:01 -0700)]
Bug
1300437 - DateTime::TimeZone::offset_as_string called incorrectly (#19)
Simon Green [Thu, 6 Oct 2016 21:29:48 +0000 (10:29 +1300)]
Bug
1290588 - Group Administration via interface should error if regular expression size is greater than column length
Ekta Parmar [Mon, 3 Oct 2016 15:26:10 +0000 (11:26 -0400)]
Bug
1305468 - Don't concatenate assets when PLACK_ENV ne development
r=dylan
Marko Kohtala [Mon, 3 Oct 2016 14:28:52 +0000 (10:28 -0400)]
Bug
1254516 - Emails do not indicate to Exchange that they are auto-generated, and so get auto-responses
r=dylan
Simon Green [Thu, 29 Sep 2016 23:45:45 +0000 (09:45 +1000)]
Bug
1293782 - Document how to set keywords during initial bug creation via REST api
Simon Green [Tue, 27 Sep 2016 09:59:40 +0000 (19:59 +1000)]
Bug
1291968 - Add UI cue explaining non-editability of email address
Dylan William Hardison [Mon, 26 Sep 2016 21:47:06 +0000 (17:47 -0400)]
Bug
1284979 - Write test case to find obvious uses of inline javascript in the templates
r=dkl
Dylan William Hardison [Tue, 20 Sep 2016 22:19:47 +0000 (18:19 -0400)]
Bug
1263244 - Throw*Error inside templates should always use die(), as if error_mode is ERROR_MODE_DIE
r=dkl,a=dylan
Dylan William Hardison [Tue, 20 Sep 2016 15:10:08 +0000 (11:10 -0400)]
fix rst syntax
Dylan William Hardison [Tue, 20 Sep 2016 14:20:59 +0000 (10:20 -0400)]
small improvement to README
Sina Mashek [Mon, 19 Sep 2016 23:54:44 +0000 (16:54 -0700)]
Bug
1303896 - Locate 'host' (#26)
Sina Mashek [Mon, 19 Sep 2016 23:52:40 +0000 (19:52 -0400)]
Bug
1303896 - Can't locate object method "host" via package "URI::_generic" at Bugzilla/CGI.pm line 454.
r=dylan
Dylan William Hardison [Mon, 19 Sep 2016 23:43:31 +0000 (19:43 -0400)]
Bug
1302755 - Optimize request_cache() more (#25)
Dylan William Hardison [Wed, 14 Sep 2016 15:36:13 +0000 (11:36 -0400)]
Bug
1302755 - Optimize request_cache() more
r=jfearn
Andrea Orsini [Mon, 19 Sep 2016 15:14:14 +0000 (11:14 -0400)]
Bug
1303702 - bug history table 'when' column shows 00:00 only using sqlite
r/a=dylan
Simon Green [Thu, 15 Sep 2016 08:49:50 +0000 (18:49 +1000)]
Bug 399066 - Remove the 'cookiedomain' parameter
Simon Green [Thu, 15 Sep 2016 08:44:54 +0000 (18:44 +1000)]
Bug 65388 - Make it possible to query for open bugs with an inactive target milestone
David Lawrence [Mon, 12 Sep 2016 17:00:03 +0000 (17:00 +0000)]
Bug
1302143 - Bad json in META.json breaking checksetup.pl
Marcus von Appen [Mon, 12 Sep 2016 16:33:42 +0000 (17:33 +0100)]
Bug
1070122 - add option to send test email to Params page
Gervase Markham [Mon, 12 Sep 2016 16:28:58 +0000 (17:28 +0100)]
Bug
1294596 - remove optional Test::Taint references, as it's now mandatory. r=dylan
Frédéric Buclin [Sun, 11 Sep 2016 18:02:27 +0000 (14:02 -0400)]
Bug 580471 - Ship with a default web.config for IIS installs
Dylan William Hardison [Sun, 11 Sep 2016 14:07:02 +0000 (10:07 -0400)]
ignore more perl toolchain files
Dylan William Hardison [Sun, 11 Sep 2016 13:53:48 +0000 (09:53 -0400)]
remove radius and ldap from default set of --cpanm features
Frédéric Buclin [Sun, 11 Sep 2016 03:08:04 +0000 (23:08 -0400)]
Bug
1263379 - Remove support for Windows 2000
Frédéric Buclin [Sat, 10 Sep 2016 22:32:56 +0000 (18:32 -0400)]
Bug
1260020 - Use Win32::GetConsoleOutputCP() instead of Win32::Console::OutputCP()
Dylan William Hardison [Mon, 4 Jul 2016 14:43:48 +0000 (10:43 -0400)]
Bug
1284263 - Add optional support for $DATABASE_URL instead of localconfig for db_* connection params.
Dylan William Hardison [Sat, 10 Sep 2016 16:35:49 +0000 (12:35 -0400)]
Bug
1294569 - 100markdown.t doesn't work without a working DB
Ryan Wilson [Sat, 10 Sep 2016 15:47:41 +0000 (11:47 -0400)]
Bug 988971 - Replace Classic with "Sandstone" skin as Standard skin
r=dylan,a=dylan
Dylan William Hardison [Wed, 7 Sep 2016 23:35:31 +0000 (19:35 -0400)]
Bug
1294587 - The CSP feature is broken
r=dkl
David Lawrence [Tue, 6 Sep 2016 14:49:39 +0000 (10:49 -0400)]
- Further test suite fixes for email/login changes
David Lawrence [Wed, 31 Aug 2016 22:59:48 +0000 (18:59 -0400)]
- Selenium test script fixes to work with recent email/login changes
David Lawrence [Wed, 31 Aug 2016 19:19:22 +0000 (15:19 -0400)]
- Improved CI support for PostgreSQL and Sqlite
David Lawrence [Wed, 31 Aug 2016 16:00:16 +0000 (16:00 +0000)]
- Fix whitespace issue in xt/webservice/bug_attachments.t