]> git.ipfire.org Git - thirdparty/bugzilla.git/log
thirdparty/bugzilla.git
9 months agotypo fix release-5.0-stable
Dave Miller [Wed, 9 Oct 2024 21:19:39 +0000 (17:19 -0400)] 
typo fix

9 months agoupdate index page message with correct branch names
Dave Miller [Wed, 9 Oct 2024 21:19:01 +0000 (17:19 -0400)] 
update index page message with correct branch names

9 months agoupdate dead branch file with appropriate branch names
Dave Miller [Wed, 9 Oct 2024 21:08:23 +0000 (17:08 -0400)] 
update dead branch file with appropriate branch names

9 months agoMerge branch '5.0' into release-5.0-stable
Dave Miller [Wed, 9 Oct 2024 21:04:07 +0000 (17:04 -0400)] 
Merge branch '5.0' into release-5.0-stable

22 months agoBug 1850481: Tell 5.0 git users to use 5.2 (#148) 5.0
Dave Miller [Thu, 14 Sep 2023 11:40:29 +0000 (06:40 -0500)] 
Bug 1850481: Tell 5.0 git users to use 5.2 (#148)

2 years agoUpdate README to list abandoned status (#117)
Dave Miller [Sat, 10 Sep 2022 20:31:46 +0000 (16:31 -0400)] 
Update README to list abandoned status (#117)

* Update README to list abandoned status

* Reformat to fit GitHub's "preformatted" page width

2 years agoCreate THIS_BRANCH_IS_DEAD.txt (#115)
Dave Miller [Wed, 31 Aug 2022 18:25:53 +0000 (14:25 -0400)] 
Create THIS_BRANCH_IS_DEAD.txt (#115)

3 years agoBug 1657496: correctly handle MIME type on single-part email. r=eseyman, a=justdave
Dave Miller [Thu, 16 Dec 2021 23:45:25 +0000 (18:45 -0500)] 
Bug 1657496: correctly handle MIME type on single-part email. r=eseyman, a=justdave

3 years agoRemove Landfill reference (#103)
Linh Nguyen [Sat, 20 Nov 2021 05:46:26 +0000 (00:46 -0500)] 
Remove Landfill reference (#103)

* Remove Landfill reference and update test site (#1)

* Update README

* Update README

* Update bugzilla-submit.xml

* Update creating-an-account.rst

* Update filing.rst

* Update finding.rst

* Address review comments

4 years agoUse HTTPS protocol in documentation (#64)
Suriyaa Sundararuban [Mon, 22 Mar 2021 04:45:26 +0000 (05:45 +0100)] 
Use HTTPS protocol in documentation (#64)

6 years agoAdd viewport meta (#78)
Georgi D. Sotirov [Fri, 24 May 2019 14:32:38 +0000 (17:32 +0300)] 
Add viewport meta (#78)

Add viewport meta to improve rendering on mobile devices. Without this meta Google Search tools would report Bugzilla pages as not suitable for mobile devices.

6 years agoMerge tag 'release-5.0.6' into release-5.0-stable
Dave Miller [Fri, 26 Apr 2019 19:04:29 +0000 (15:04 -0400)] 
Merge tag 'release-5.0.6' into release-5.0-stable

6 years agobump version and add release notes for 5.0.6 release-5.0.6
Dylan William Hardison [Sat, 9 Feb 2019 21:01:45 +0000 (16:01 -0500)] 
bump version and add release notes for 5.0.6

6 years agoBug 1526703 - Increase the size of the flagtype id column
Dylan William Hardison [Tue, 5 Feb 2019 00:51:53 +0000 (19:51 -0500)] 
Bug 1526703 - Increase the size of the flagtype id column

6 years agono bug - perltidy again, using the latest release
Perl Tidy [Fri, 1 Feb 2019 01:50:06 +0000 (20:50 -0500)] 
no bug - perltidy again, using the latest release

blame jeff

6 years agoadd perl-fmt script
Dylan William Hardison [Fri, 1 Feb 2019 00:10:06 +0000 (19:10 -0500)] 
add perl-fmt script

6 years agoBug 1497042 - Enclose table names in CREATE queries
Sébastien Santoro [Thu, 31 Jan 2019 01:50:01 +0000 (20:50 -0500)] 
Bug 1497042 - Enclose table names in CREATE queries

6 years agoupdate release notes release-5.0.5
Dylan William Hardison [Thu, 31 Jan 2019 01:38:37 +0000 (20:38 -0500)] 
update release notes

6 years agoBug 981487 - change bugs_fulltext from myisam to innodb
Dylan William Hardison [Thu, 31 Jan 2019 01:34:54 +0000 (20:34 -0500)] 
Bug 981487 - change bugs_fulltext from myisam to innodb

6 years agono bug - reformat all the code using the new perltidy rules
Perl Tidy [Thu, 31 Jan 2019 01:00:43 +0000 (20:00 -0500)] 
no bug - reformat all the code using the new perltidy rules

6 years agoBug 1226123 - Email addresses with an apostrophe in them break the "Send Mail to...
Arshad Kazmi [Tue, 25 Sep 2018 21:03:41 +0000 (02:33 +0530)] 
Bug 1226123 - Email addresses with an apostrophe in them break the "Send Mail to Bug Assignees" button in buglists

7 years agoadd a new hook: template_after_create (#60)
Dylan William Hardison [Wed, 21 Mar 2018 02:06:11 +0000 (22:06 -0400)] 
add a new hook: template_after_create (#60)

7 years agobug 1429243 - Fix default values for version and op_sys when importing from Jitterbugs
Quanah Gibson-Mount [Wed, 21 Mar 2018 01:52:16 +0000 (18:52 -0700)] 
bug 1429243 - Fix default values for version and op_sys when importing from Jitterbugs

7 years agoBumped versions post-release
David Lawrence [Fri, 16 Feb 2018 19:24:54 +0000 (14:24 -0500)] 
Bumped versions post-release

7 years agoMerge tag 'release-5.0.4' into release-5.0-stable
David Lawrence [Fri, 16 Feb 2018 16:40:06 +0000 (11:40 -0500)] 
Merge tag 'release-5.0.4' into release-5.0-stable

* tag 'release-5.0.4':
  Bumped version to 5.0.4
  Bug 1438593: Release notes for Bugzilla 5.0.4 r/a=dylan
  Bug 1433400 (CVE-2018-5123) Prevent cross-site image requests from leaking contents of certain fields due to regex search r=jfearn,a=dylan
  Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=1427623 by setting (#57)
  Significant update to jb2bz.py. (#58)
  Bug 1301887 - File::Slurp triggers warnings on perl 5.24 (#53)
  Bug 1398100 - tiny tweaks to release notes
  Revert "Bug 1306534 - Crash when pasting UTF8 text as an attachment"
  Bug 1310728 - editflagtypes.cgi crashes when classifications are enabled and the user hasn't global editcomponents privs r/a=dkl
  Bug 1306534 - Crash when pasting UTF8 text as an attachment
  nit: wrong method call in Bugzilla::Migrate
  Bug 1300437 - DateTime::TimeZone::offset_as_string called incorrectly (#19)
  Bug 1303702 - bug history table 'when' column shows 00:00 only using sqlite
  - New CI docker image for testing
  Bug 1292510 - replace references to git.mozilla.org with references to github. r=dylan
  Fix the default API URL
  Bug 1269266 - API links for Bugzilla 5+ not working anymore
  Bug 1273846 - Checksetup fails to update chart storage during pre-3.6 -> 5.0 upgrade r/a=dkl
  Bumped version post-release

7 years agoBumped version to 5.0.4 release-5.0.4
David Lawrence [Fri, 16 Feb 2018 16:39:07 +0000 (11:39 -0500)] 
Bumped version to 5.0.4

7 years agoBug 1438593: Release notes for Bugzilla 5.0.4
David Lawrence [Fri, 16 Feb 2018 16:38:33 +0000 (11:38 -0500)] 
Bug 1438593: Release notes for Bugzilla 5.0.4
r/a=dylan

7 years agoBug 1433400 (CVE-2018-5123) Prevent cross-site image requests from leaking contents...
Dylan William Hardison [Fri, 16 Feb 2018 16:37:21 +0000 (11:37 -0500)] 
Bug 1433400 (CVE-2018-5123) Prevent cross-site image requests from leaking contents of certain fields due to regex search
r=jfearn,a=dylan

7 years agoFixes https://bugzilla.mozilla.org/show_bug.cgi?id=1427623 by setting (#57) preview/5.0.4
Quanah Gibson-Mount [Thu, 4 Jan 2018 15:51:54 +0000 (07:51 -0800)] 
Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=1427623 by setting (#57)

the priority on import

7 years agoSignificant update to jb2bz.py. (#58)
Quanah Gibson-Mount [Thu, 4 Jan 2018 15:51:06 +0000 (07:51 -0800)] 
Significant update to jb2bz.py. (#58)

Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=1427626
Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=1427638
Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=1427664

Convert jb2bz to use "email" module rather than rfc822, multifile,
mimetools, and StringIO for easier manipulation of the mailbox objects.

This fixed (among other things) 1427626 as the Subject of the email is
now obtained correctly.

Fix the date formatting throughout to always use UTC, which is what
Bugzilla expects for the dates.  This fixed 1427638.

Fix attachment processing, which was using multifile rather than walking
the parts of the email object.  This fixed part of 1427664

Fix the fact that the process_reply_file function never checked for
attachments in any followups.  This fixed part of 1427664

Fix attachment processor to ignore various signatures and message/rfc822
multipart messages.  For the latter, it sets "filename=" values to files
that don't actually exist, which caused attachment processing to bomb.

7 years agoBug 1301887 - File::Slurp triggers warnings on perl 5.24 (#53)
Vitaly Belekhov [Thu, 4 Jan 2018 15:50:05 +0000 (22:50 +0700)] 
Bug 1301887 - File::Slurp triggers warnings on perl 5.24 (#53)

* Bug 1301887 - File::Slurp triggers warnings on perl 5.24 and it is recommended to not use it (#21)

r=mtyson

* Fix for vrite in aa735d4

* Added https://gitweb.gentoo.org/proj/gentoo-bugzilla.git/commit/?id=ca7bfc9c485c959fad2aee1f7c1dbc0fb484553b

7 years agoBug 1398100 - tiny tweaks to release notes
Gervase Markham [Fri, 8 Sep 2017 11:08:34 +0000 (12:08 +0100)] 
Bug 1398100 - tiny tweaks to release notes

8 years agoRevert "Bug 1306534 - Crash when pasting UTF8 text as an attachment" 46/head
Dylan William Hardison [Wed, 19 Oct 2016 13:09:43 +0000 (09:09 -0400)] 
Revert "Bug 1306534 - Crash when pasting UTF8 text as an attachment"

This reverts commit 89cb60fe38a7962c876bce18368db90cedda84eb.

8 years agoBug 1310728 - editflagtypes.cgi crashes when classifications are enabled and the...
Frédéric Buclin [Mon, 17 Oct 2016 21:43:31 +0000 (21:43 +0000)] 
Bug 1310728 - editflagtypes.cgi crashes when classifications are enabled and the user hasn't global editcomponents privs
r/a=dkl

8 years agoBug 1306534 - Crash when pasting UTF8 text as an attachment
Matt Tyson [Tue, 11 Oct 2016 23:07:32 +0000 (19:07 -0400)] 
Bug 1306534 - Crash when pasting UTF8 text as an attachment

r=dylan

8 years agonit: wrong method call in Bugzilla::Migrate
Dylan William Hardison [Sat, 8 Oct 2016 17:09:18 +0000 (13:09 -0400)] 
nit: wrong method call in Bugzilla::Migrate

8 years agoBug 1300437 - DateTime::TimeZone::offset_as_string called incorrectly (#19)
Dylan William Hardison [Sat, 8 Oct 2016 17:01:39 +0000 (10:01 -0700)] 
Bug 1300437 - DateTime::TimeZone::offset_as_string called incorrectly (#19)

8 years agoBug 1303702 - bug history table 'when' column shows 00:00 only using sqlite
Andrea Orsini [Mon, 19 Sep 2016 15:14:14 +0000 (11:14 -0400)] 
Bug 1303702 - bug history table 'when' column shows 00:00 only using sqlite

r/a=dylan

8 years ago- New CI docker image for testing
David Lawrence [Wed, 7 Sep 2016 17:48:29 +0000 (13:48 -0400)] 
- New CI docker image for testing

8 years agoBug 1292510 - replace references to git.mozilla.org with references to github. r...
Gervase Markham [Fri, 5 Aug 2016 13:49:51 +0000 (14:49 +0100)] 
Bug 1292510 - replace references to git.mozilla.org with references to github. r=dylan

9 years agoFix the default API URL
Frédéric Buclin [Wed, 1 Jun 2016 10:52:15 +0000 (12:52 +0200)] 
Fix the default API URL

9 years agoBug 1269266 - API links for Bugzilla 5+ not working anymore
Frédéric Buclin [Wed, 1 Jun 2016 08:17:46 +0000 (10:17 +0200)] 
Bug 1269266 - API links for Bugzilla 5+ not working anymore

9 years agoBug 1273846 - Checksetup fails to update chart storage during pre-3.6 -> 5.0 upgrade
Frédéric Buclin [Thu, 19 May 2016 22:42:54 +0000 (00:42 +0200)] 
Bug 1273846 - Checksetup fails to update chart storage during pre-3.6 -> 5.0 upgrade
r/a=dkl

9 years agoBumped version post-release
David Lawrence [Mon, 16 May 2016 20:03:20 +0000 (20:03 +0000)] 
Bumped version post-release

9 years agoRevert "Bumped version post-release" 50/head 6/head
David Lawrence [Mon, 16 May 2016 20:02:32 +0000 (20:02 +0000)] 
Revert "Bumped version post-release"

This reverts commit 2d0ba4520ba0458d1f2abf3ef71d2d459d2a0f75.

9 years agoBumped version post-release
David Lawrence [Mon, 16 May 2016 20:01:30 +0000 (20:01 +0000)] 
Bumped version post-release

9 years agoBumped version to 5.0.3 release-5.0.3
David Lawrence [Mon, 16 May 2016 18:43:56 +0000 (18:43 +0000)] 
Bumped version to 5.0.3

9 years agoBug 1253263 - (CVE-2016-2803) [SECURITY] XSS vulnerability in dependency graphs via...
Frédéric Buclin [Mon, 16 May 2016 18:23:43 +0000 (20:23 +0200)] 
Bug 1253263 - (CVE-2016-2803) [SECURITY] XSS vulnerability in dependency graphs via bug summary
r/a=dkl

9 years agoBug 1269388 - Release notes for Bugzilla 5.0.3
Frédéric Buclin [Fri, 13 May 2016 18:37:08 +0000 (20:37 +0200)] 
Bug 1269388 - Release notes for Bugzilla 5.0.3
r=dkl

9 years agoBug 1250114 - XSS possible in extensions calling global/tabs.html.tmpl if tab.link...
Dylan William Hardison [Fri, 13 May 2016 17:34:19 +0000 (13:34 -0400)] 
Bug 1250114 - XSS possible in extensions calling global/tabs.html.tmpl if tab.link is user-controlled

9 years agoAdd build.platform = linux64, machine.platform = linux64 to taskgraph.json to remove...
David Lawrence [Mon, 2 May 2016 14:30:07 +0000 (10:30 -0400)] 
Add build.platform = linux64, machine.platform = linux64 to taskgraph.json to remove b2gtest from Treeherder results

9 years agoBug 1259881 - CSV export vulnerable to formulae injection (again)
Frédéric Buclin [Mon, 25 Apr 2016 21:39:02 +0000 (23:39 +0200)] 
Bug 1259881 - CSV export vulnerable to formulae injection (again)
r=sgreen a=dkl

9 years agoBug 542239 - Accept pronouns everywhere in query.cgi
Albert Ting [Wed, 20 Apr 2016 01:50:44 +0000 (01:50 +0000)] 
Bug 542239 - Accept pronouns everywhere in query.cgi
r=dkl,a=dkl

9 years agoBug 1232171 - 'make clean' shouldn't delete rst/, images/ and Makefile, only generate...
Frédéric Buclin [Fri, 15 Apr 2016 19:30:36 +0000 (21:30 +0200)] 
Bug 1232171 - 'make clean' shouldn't delete rst/, images/ and Makefile, only generated files
r=gerv

9 years agoEmail::MIME::Attachment::Stripper is no longer used, see bug 437076
Frédéric Buclin [Sun, 10 Apr 2016 00:12:18 +0000 (02:12 +0200)] 
Email::MIME::Attachment::Stripper is no longer used, see bug 437076

9 years agoFix an incorrect URL in the documentation
Frédéric Buclin [Sat, 9 Apr 2016 16:06:21 +0000 (18:06 +0200)] 
Fix an incorrect URL in the documentation

9 years agoBug 1204957 - Locally compiled POD documentation is no longer accessible from docs...
Frédéric Buclin [Fri, 8 Apr 2016 23:33:30 +0000 (01:33 +0200)] 
Bug 1204957 - Locally compiled POD documentation is no longer accessible from docs/en/html/api/
r=dkl

9 years agoBug 1246228 - Email addresses must not be encoded
Frédéric Buclin [Tue, 5 Apr 2016 23:54:54 +0000 (01:54 +0200)] 
Bug 1246228 - Email addresses must not be encoded
r/a=dkl

9 years agoBug 1261124: When deleting a component, this component is listed again
Frédéric Buclin [Tue, 5 Apr 2016 15:22:25 +0000 (17:22 +0200)] 
Bug 1261124: When deleting a component, this component is listed again
r/a=dkl

9 years agoBug 1260027: Document how to compile the documentation on Windows
Frédéric Buclin [Fri, 1 Apr 2016 21:33:04 +0000 (23:33 +0200)] 
Bug 1260027: Document how to compile the documentation on Windows
r=gerv

9 years agoBug 1200010: The Quick Start doc should stop assuming Bugzilla is your single application
Frédéric Buclin [Fri, 1 Apr 2016 20:01:20 +0000 (22:01 +0200)] 
Bug 1200010: The Quick Start doc should stop assuming Bugzilla is your single application
r=gerv

9 years agoBug 987742 (part 2): correctly detaint $ENV{PATH} on Strawberry Perl
Frédéric Buclin [Sat, 26 Mar 2016 23:31:42 +0000 (00:31 +0100)] 
Bug 987742 (part 2): correctly detaint $ENV{PATH} on Strawberry Perl

9 years agoBug 1255619: CGI scripts should not send duplicated headers
Frédéric Buclin [Mon, 21 Mar 2016 22:18:07 +0000 (23:18 +0100)] 
Bug 1255619: CGI scripts should not send duplicated headers
r/a=dkl

9 years agoBug 1230932: Providing a condition as an ID to the webservice results in a taint...
Frédéric Buclin [Sat, 19 Mar 2016 16:33:48 +0000 (17:33 +0100)] 
Bug 1230932: Providing a condition as an ID to the webservice results in a taint error
r/a=dkl

9 years agoBug 1253267: Possible DOT injection vulnerability in dependency graphs if long bug...
Frédéric Buclin [Tue, 15 Mar 2016 16:11:52 +0000 (17:11 +0100)] 
Bug 1253267: Possible DOT injection vulnerability in dependency graphs if long bug summaries are wrapped
r/a=dkl

9 years agoBug 1250908: "Use of uninitialized value" warning thrown when creating a new bug...
Thorsten Schöning [Wed, 9 Mar 2016 22:22:17 +0000 (23:22 +0100)] 
Bug 1250908: "Use of uninitialized value" warning thrown when creating a new bug depending or blocking another one
r=LpSolit a=dkl

9 years agoBug 1234977: Replace \d+ by [0-9]+ in critical validation places
Frédéric Buclin [Wed, 9 Mar 2016 22:06:28 +0000 (23:06 +0100)] 
Bug 1234977: Replace \d+ by [0-9]+ in critical validation places
r=dylan a=dkl

9 years agoIIS instructions work with Windows 10 too
Frédéric Buclin [Sun, 6 Mar 2016 15:45:25 +0000 (16:45 +0100)] 
IIS instructions work with Windows 10 too

9 years agoBug 1250354: The "Forgot password" link should not be displayed if users are not...
Frédéric Buclin [Tue, 23 Feb 2016 22:50:26 +0000 (23:50 +0100)] 
Bug 1250354:  The "Forgot password" link should not be displayed if users are not allowed to change it
r/a=dkl

9 years agoBug 1250264: Extensions have no easy way to override favicon.ico
Frédéric Buclin [Mon, 22 Feb 2016 22:09:20 +0000 (23:09 +0100)] 
Bug 1250264: Extensions have no easy way to override favicon.ico
r/a=dkl

9 years ago- task.expires needs to be greater than artifacts.expires
David Lawrence [Mon, 22 Feb 2016 20:49:32 +0000 (20:49 +0000)] 
- task.expires needs to be greater than artifacts.expires

9 years ago- Update artifact expiration date
David Lawrence [Mon, 22 Feb 2016 15:25:40 +0000 (15:25 +0000)] 
- Update artifact expiration date

9 years agoBug 1242263: The web server and SQL server sections are not correctly referenced...
Frédéric Buclin [Wed, 17 Feb 2016 11:33:03 +0000 (12:33 +0100)] 
Bug 1242263: The web server and SQL server sections are not correctly referenced in the documentation
r=gerv

9 years agoTravis CI config file no longer necessary
David Lawrence [Mon, 8 Feb 2016 18:38:03 +0000 (18:38 +0000)] 
Travis CI config file no longer necessary

9 years agoBug 1246531: REST_DOC should point to bugzilla.readthedocs.org instead of bugzilla.org
Frédéric Buclin [Mon, 8 Feb 2016 18:31:27 +0000 (19:31 +0100)] 
Bug 1246531: REST_DOC should point to bugzilla.readthedocs.org instead of bugzilla.org
r/a=dkl

9 years agoBug 1046241: All links to the documentation displayed besides error messages are...
Frédéric Buclin [Mon, 8 Feb 2016 18:27:33 +0000 (19:27 +0100)] 
Bug 1046241: All links to the documentation displayed besides error messages are broken
r=gerv a=dkl

9 years agoBug 1240752 - Attachment data submitted via REST API must always be base64 encoded
David Lawrence [Tue, 26 Jan 2016 15:17:18 +0000 (15:17 +0000)] 
Bug 1240752 - Attachment data submitted via REST API must always be base64 encoded
r=gerv,a=dkl

9 years agoBug 1235271: Remove .htaccess from .gitignore
Frédéric Buclin [Fri, 8 Jan 2016 18:53:11 +0000 (19:53 +0100)] 
Bug 1235271: Remove .htaccess from .gitignore
r/a=dkl

9 years agoBug 402039: Exporting CSV from chart.cgi doesn't set mimetype, content_disposition...
Frédéric Buclin [Thu, 7 Jan 2016 20:45:23 +0000 (21:45 +0100)] 
Bug 402039: Exporting CSV from chart.cgi doesn't set mimetype, content_disposition, or filename
r/a=dkl

9 years agoBug 324242: Unsetting shutdownhtml requires too much intimate knowledge
Frédéric Buclin [Thu, 7 Jan 2016 20:37:36 +0000 (21:37 +0100)] 
Bug 324242: Unsetting shutdownhtml requires too much intimate knowledge
r/a=dkl

9 years agoAddl. fix for bug 1089448: also detaint $ENV{WINDIR} on Windows
Frédéric Buclin [Thu, 7 Jan 2016 00:45:27 +0000 (01:45 +0100)] 
Addl. fix for bug 1089448: also detaint $ENV{WINDIR} on Windows

9 years agoBug 1235270: Set submitter_id before calling _check_data()
Mahdi Mokhtari [Tue, 5 Jan 2016 14:06:16 +0000 (15:06 +0100)] 
Bug 1235270: Set submitter_id before calling _check_data()
r=LpSolit a=dkl

9 years agoBug 1045782: Existing URLs in the See Also field should not throw an error when the...
Frédéric Buclin [Tue, 5 Jan 2016 13:47:05 +0000 (14:47 +0100)] 
Bug 1045782: Existing URLs in the See Also field should not throw an error when the bug is displayed
r/a=dkl

9 years agoBug 1191706: When editing flag types, components do not match the selected product...
Frédéric Buclin [Mon, 4 Jan 2016 22:51:02 +0000 (23:51 +0100)] 
Bug 1191706: When editing flag types, components do not match the selected product when classifications are enabled
r/a=dkl

9 years agoBug 1235395 - whine.pl broken due to a missing generate_email() routine
Dylan Hardison [Sat, 2 Jan 2016 23:54:48 +0000 (18:54 -0500)] 
Bug 1235395 - whine.pl broken due to a missing generate_email() routine
r=lpsolit,a=dylan

9 years agoBug 1235271: Remove .htaccess from .gitignore
Frédéric Buclin [Tue, 29 Dec 2015 00:42:43 +0000 (01:42 +0100)] 
Bug 1235271: Remove .htaccess from .gitignore
r/a=dkl

9 years agoBug 1235415: Use "AllowOverride All" everywhere
Frédéric Buclin [Mon, 28 Dec 2015 18:31:00 +0000 (19:31 +0100)] 
Bug 1235415: Use "AllowOverride All" everywhere

9 years agoBumped version post-release
David Lawrence [Tue, 22 Dec 2015 21:51:31 +0000 (21:51 +0000)] 
Bumped version post-release

9 years agoRevert "Add missing use List::MoreUtils" release-5.0.2
David Lawrence [Tue, 22 Dec 2015 21:03:32 +0000 (21:03 +0000)] 
Revert "Add missing use List::MoreUtils"

This reverts commit d4470f34b627bb5a15a0af496db67185a922f4f5.

9 years agoRevert "Bug 1230932 - Providing a condition as an ID to the webservice results in...
David Lawrence [Tue, 22 Dec 2015 21:01:15 +0000 (21:01 +0000)] 
Revert "Bug 1230932 - Providing a condition as an ID to the webservice results in a taint error"

This reverts commit 396ae88235ef68ed45978dfb36774c5fe9a2d699.

9 years agoAdd missing use List::MoreUtils
Dylan Hardison [Tue, 22 Dec 2015 20:42:31 +0000 (15:42 -0500)] 
Add missing use List::MoreUtils

9 years agoBumped version to 5.0.2
David Lawrence [Tue, 22 Dec 2015 19:16:45 +0000 (19:16 +0000)] 
Bumped version to 5.0.2

9 years agoBug 1232785 - [SECURITY] Buglists in CSV format can be parsed as valid javascript...
Dylan Hardison [Tue, 22 Dec 2015 18:34:38 +0000 (13:34 -0500)] 
Bug 1232785 - [SECURITY] Buglists in CSV format can be parsed as valid javascript in some browsers
r=dkl,a=dkl

9 years agoBug 1221518: (CVE-2015-8508) [SECURITY] XSS in dependency graphs when displaying...
Frédéric Buclin [Tue, 22 Dec 2015 17:58:16 +0000 (18:58 +0100)] 
Bug 1221518: (CVE-2015-8508) [SECURITY] XSS in dependency graphs when displaying the bug summary
r=gerv a=dkl

9 years agoBug 1230932 - Providing a condition as an ID to the webservice results in a taint...
Dylan Hardison [Tue, 22 Dec 2015 17:08:32 +0000 (12:08 -0500)] 
Bug 1230932 - Providing a condition as an ID to the webservice results in a taint error
r=dkl,a=dkl

9 years agoUpdate release notes
Frédéric Buclin [Tue, 22 Dec 2015 15:50:01 +0000 (16:50 +0100)] 
Update release notes

9 years agoBug 1234056: The "Create Comments" documentation incorrectly mentions that you can...
Frédéric Buclin [Mon, 21 Dec 2015 15:54:40 +0000 (16:54 +0100)] 
Bug 1234056: The "Create Comments" documentation incorrectly mentions that you can add a comment to several bugs at once
r/a=dkl

9 years agoNeed to uncomment another line in httpd.conf, see bug 1207582
Frédéric Buclin [Mon, 21 Dec 2015 00:31:10 +0000 (01:31 +0100)] 
Need to uncomment another line in httpd.conf, see bug 1207582

9 years agoBug 1232190: FlagType.create should require the user to be logged in
Frédéric Buclin [Fri, 18 Dec 2015 11:53:50 +0000 (12:53 +0100)] 
Bug 1232190: FlagType.create should require the user to be logged in
r/a=dkl

9 years agoBug 1232578: Don't save hashed passwords in audit_log
Frédéric Buclin [Wed, 16 Dec 2015 21:25:29 +0000 (22:25 +0100)] 
Bug 1232578: Don't save hashed passwords in audit_log
r/a=dkl