aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Merge tag 'release-5.0.6' into bugstestRobin H. Johnson2020-01-271-2/+2
|\ | | | | | | | | | | | | Merge upstream 5.0.6 release, now without conflicts after the problematic code reformatting change. Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
| * no bug - perltidy again, using the latest releasePerl Tidy2019-01-311-2/+2
| | | | | | | | blame jeff
| * no bug - reformat all the code using the new perltidy rulesPerl Tidy2019-01-301-576/+614
| |
* | Gentoo-local version of 7f3a749d7bd78a3e4aee163f562d7e95b0954b44 w/ ↵Robin H. Johnson2019-12-011-567/+605
| | | | | | | | | | | | | | | | | | Perl-Tidy-20180220 Reformat all code using Perl-Tidy v20180220 and .perltidyrc from matching upstream 7f3a749d7bd78a3e4aee163f562d7e95b0954b44 commit. Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* | attachment: Force utf-8 if no charset is explicitly specifiedMichał Górny2018-12-011-7/+1
| | | | | | | | Signed-off-by: Michał Górny <mgorny@gentoo.org>
* | Merge tag 'release-5.0.4' into bugstestRobin H. Johnson2018-03-051-0/+1
|\|
| * Bug 1433400 (CVE-2018-5123) Prevent cross-site image requests from leaking ↵Dylan William Hardison2018-02-161-0/+1
| | | | | | | | | | | | contents of certain fields due to regex search r=jfearn,a=dylan
* | Merge tag 'release-5.0.3' into bugstestChristian Ruppert2016-06-181-0/+1
|\|
| * Bug 1246228 - Email addresses must not be encodedFrédéric Buclin2016-04-061-0/+1
| | | | | | | | r/a=dkl
| * Revert "Bug 1073264 - allow attachment download to be offloaded to the ↵Gervase Markham2014-10-241-17/+1
| | | | | | | | | | | | webserver using X-SendFile or equivalent. r=gerv, a=glob." Morning brain thought this bug was approved for 5.0. This reverts commit 55e8faeed19ff618483cb5803847bdba6c80c752.
| * Bug 1073264 - allow attachment download to be offloaded to the webserver ↵Damien Nozay2014-10-241-1/+17
| | | | | | | | using X-SendFile or equivalent. r=gerv, a=glob.
| * Bug 1068494: Remove CVS/Bonsai/LXR-specific bits of Patch ViewerFrédéric Buclin2014-10-161-18/+2
| | | | | | | | r=gerv a=glob
| * Bug 1082887: comments made when setting a flag from the attachment details ↵Byron Jones2014-10-161-53/+59
| | | | | | | | | | | | page are not included in the "flag updated" email r=dkl,a=glob
| * Bug 1075578: [SECURITY] Improper filtering of CGI argumentsFrédéric Buclin2014-10-061-4/+6
| | | | | | | | r=dkl,a=sgreen
| * Bug 996893: Perl 5.18 and newer throw tons of warnings about deprecated modulesFrédéric Buclin2014-08-131-1/+3
| | | | | | | | r=dkl a=sgreen
| * Bug 294021: Allow requestees to set attachment flags even if they don't have ↵Frédéric Buclin2014-03-211-3/+25
| | | | | | | | | | | | editbugs privs r=gerv a=justdave
| * Bug 913904: (CVE-2013-1734) [SECURITY] CSRF when updating attachmentsFrédéric Buclin2013-10-161-7/+10
| | | | | | | | r=dkl a=sgreen
| * Bug 811280: Adds a caching mechanism to Bugzilla::Object to avoid querying ↵Byron Jones2012-11-221-3/+3
| | | | | | | | | | | | the database repeatedly for the same information r=dkl,a=LpSolit
| * Bug 803600: Clean up the comment generated when deleting attachmentsFrédéric Buclin2012-10-191-1/+0
| | | | | | | | r=justdave a=LpSolit
| * Bug 787529: Use |use 5.10.1| everywhereFrédéric Buclin2012-09-011-12/+1
| | | | | | | | r=wicked a=LpSolit
* | Merge branch '4.4.9-to-5.0-vanilla-nohist' into 5.0-migrationChristian Ruppert2015-07-111-88/+86
|\ \ | | | | | | | | | | | | Move @gentoo.org restriction for new accounts into the Gentoo extentions. Reset some templates to vanilla/default. We'll use custom ones from now on
| * | Vanilla 4.4.9 to 5.0 without history due to massive merge conflictsChristian Ruppert2015-07-111-88/+86
| | |
* | | Merge remote-tracking branch 'origin/upstream'gentoo-4.4.8Robin H. Johnson2015-02-071-4/+9
|\| |
| * | Bug 1082887: comments made when setting a flag from the attachment details ↵Byron Jones2014-10-161-4/+9
| | | | | | | | | | | | | | | | | | page are not included in the "flag updated" email r=dkl,a=glob
* | | Merge branch 'upstream', takes 4.4.6 fixesgentoo-4.4.6Robin H. Johnson2014-10-061-4/+6
|\| | | | | | | | | | | | | | | | | | | | | | | Conflicts: .gitignore Bugzilla/Constants.pm docs/bugzilla.ent.tmpl template/en/default/pages/release-notes.html.tmpl
| * | Bug 1075578: [SECURITY] Improper filtering of CGI argumentsFrédéric Buclin2014-10-061-4/+6
| | | | | | | | | | | | r=dkl,a=sgreen
| * | Bug 913904: (CVE-2013-1734) [SECURITY] CSRF when updating attachmentsFrédéric Buclin2013-10-161-7/+10
| | | | | | | | | | | | r=dkl a=sgreen
| * | Bug 803600: Clean up the comment generated when deleting attachmentsFrédéric Buclin2012-10-191-1/+0
| |/ | | | | | | r=justdave a=LpSolit
| * Bug 771107 - List of attachments in attachment details screen does not ↵Dave Lawrence2012-07-231-2/+0
| | | | | | | | | | | | distinguish obsolete attachments r=glob, a=LpSolit
| * Bug 138546: Add a checkbox to add himself to the CC list when creating or ↵Reed Loden2012-06-261-0/+4
| | | | | | | | | | | | editing an attachment r/a=LpSolit
| * Bug 671612: Send "X-Content-Type-Options: nosniff" with every responseMatt Selsky2012-05-291-2/+1
| | | | | | | | r/a=LpSolit
| * 2nd part of bug 731559: fix get_attachments_by_bug() everywhereFrédéric Buclin2012-03-061-3/+2
| | | | | | | | a=LpSolit
| * Bug 680131: Replace the MPL 1.1 license by the MPL 2.0 one in all files, and ↵Frédéric Buclin2012-01-111-28/+5
| | | | | | | | | | | | add it to files which miss one r=kiko r=mkanat r=mrbball a=LpSolit
| * Bug 169752: Activity log should fuse data fields split because they didn't fitFrédéric Buclin2011-12-141-2/+1
| | | | | | | | r=glob a=LpSolit
| * Bug 684225: The removal of locally stored attachments should be done from ↵c1541@hotmail.com2011-12-081-4/+0
| | | | | | | | | | | | Bugzilla::Attachment->remove_from_db r/a=LpSolit
| * Bug 703983 - CSRF vulnerability in attachment.cgi allows possible ↵Reed Loden2011-11-211-28/+5
| | | | | | | | | | | | unauthorized attachment creation [r=LpSolit a=LpSolit]
| * Bug 682822: Hide 'obsolete attachments' section when there are none to displayByron Jones2011-09-021-30/+41
| | | | | | | | r=LpSolit, a=LpSolit
| * Bug 637981: (CVE-2011-2379) [SECURITY] "Raw Unified" patch diffs can cause ↵Byron Jones2011-08-041-30/+99
| | | | | | | | | | | | XSS on this domain in IE 6-8 and Safari r/a=LpSolit
| * Bug 653404: Misleading error message when file to be attached is not ↵Frédéric Buclin2011-04-281-1/+4
| | | | | | | | | | | | readable by browser r/a=LpSolit
| * Bug 633776: Automatic charset detection for text attachmentsByron Jones2011-03-091-1/+7
| | | | | | | | r=mkanat, a=mkanat
| * Bug 607361: Creating an attachment without a "comment" param in the URL ↵Frédéric Buclin2010-10-261-1/+2
| | | | | | | | | | | | causes an internal error a=LpSolit
| * Bug 414509: offer View All (non obsolete) attachmentsGuy Pyrzak2010-10-021-0/+5
| | | | | | | | r=LpSolit, a=LpSolit
| * Bug 584110: Don't name attachment files "attachment.txt" by default, because ↵Frédéric Buclin2010-08-041-1/+1
| | | | | | | | | | | | this confuses IE a=LpSolit
| * Bug 453425 - Send "X-Content-Type-Options: nosniff" header when displaying ↵Reed Loden2010-08-031-1/+2
| | | | | | | | | | | | attachments so IE8 doesn't try to sniff the content type. [r=LpSolit a=LpSolit]
| * Bug 119703: Create an attachment by pasting it into a text fieldFrédéric Buclin2010-07-181-3/+2
| | | | | | | | r/a=mkanat
| * Bug 490930: Always store attachments locally if they are over X size (and ↵Frédéric Buclin2010-07-081-1/+0
| | | | | | | | | | | | below some threshold!), don't ever display "Big File" checkbox r=mkanat a=LpSolit
| * Bug 567846: Modify set_status, set_resolution, and set_dup_id to useMax Kanat-Alexander2010-06-031-1/+1
| | | | | | | | VALIDATOR_DEPENDENCIES, so that they don't need custom code in set_all.
| * Bug 565879: Merge ThrowCodeError("action_unrecognized"), ↵Frédéric Buclin2010-05-201-1/+1
| | | | | | | | | | | | ThrowUserError("no_valid_action") and ThrowCodeError("unknown_action") r=ghendricks a=LpSolit
| * Bug 560281: Do not display deleted attachments in "View All"Frédéric Buclin2010-05-171-0/+2
| | | | | | | | a=LpSolit
| * Bug 395451 - "Bugzilla::BugMail needs to use Bug objects internally instead ↵Reed Loden2010-05-061-3/+3
| | | | | | | | | | | | of direct SQL" [r=mkanat a=mkanat]