aboutsummaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Bumped version to 4.2release-4.2bugzilla-4.2Dave Lawrence2012-02-222-4/+4
* Bug 725663 - (CVE-2012-0453) [SECURITY] CSRF vulnerability in the XML-RPC API...Dave Lawrence2012-02-223-0/+21
* Bug 718283: Indentation and newlines in the "Descriptive text sent within whi...Matt Selsky2012-02-201-2/+2
* Bug 723944: Plain-text only emails are mangled when they contain non-ASCII ch...Frédéric Buclin2012-02-161-1/+5
* Test 1 fails if PERLLIB contains paths with whitespace.Marc Schumann2012-02-151-1/+1
* Bug 724464 - JSON-RPC support shouldn't require SOAP::LiteDave Lawrence2012-02-152-20/+14
* Bug 722113: The profile_search table has a wrong index nameFrédéric Buclin2012-02-152-1/+7
* Bug 727240: The POD for Bug.attachments is wrong about the format of the retu...Frédéric Buclin2012-02-141-16/+10
* Bug 722161: Clickjacking is possible in "View All" with HTML attachmentsFrédéric Buclin2012-02-082-4/+21
* Bump the version number post-releaseDave Lawrence2012-01-311-1/+1
* Bumped to version 4.2rc2release-4.2rc2bugzilla-4.2rc2Dave Lawrence2012-01-312-4/+4
* (CVE-2012-0440) [SECURITY] JSON-RPC permits to bypass token checks and can le...Frédéric Buclin2012-01-312-1/+18
* Bug 714472: (CVE-2012-0448) [SECURITY] utf8 homoglyphs are allowed in email a...Frédéric Buclin2012-01-314-7/+5
* Bug 714446: Product.create default behavior is broken and inconsistent with PODFrédéric Buclin2012-01-311-17/+29
* Bug 720756 - Update release notes for Bugzilla 4.2rc2Dave Lawrence2012-01-271-4/+8
* Bug 721715: URLs in the See Also field must be detainted before inserted into...Frédéric Buclin2012-01-271-4/+3
* Fix bustage due to bug 715514.Tiago Mello2012-01-251-1/+1
* Bug 717217: The regexp in Bugzilla::BugUrl::JIRA::should_handle() isn'tSimon Green2012-01-251-1/+1
* Bug 715514: Fix showdependencytree misleading in "hide resolved" viewMatt Selsky2012-01-251-2/+2
* Bug 718183: Rename duplicated series names before inserting the new index in ...Frédéric Buclin2012-01-241-0/+31
* Bug 715870: [Oracle] Related sequences and triggers must be removed when drop...Frédéric Buclin2012-01-241-1/+19
* Bug 633061: Require Apache2::SizeLimit 0.96 for proper operation on LinuxMax Kanat-Alexander2012-01-242-5/+5
* Bug 469068: SMTP parameters not documentedMatt Selsky2012-01-211-0/+62
* Bug 718905: Move user_preferences hook up, before other actions in userprefs.cgiTiago Mello2012-01-181-8/+10
* Bug 715731 - profile_search.user_id should have a FK pointing to profiles.useridDave Lawrence2012-01-121-1/+4
* Bug 717215: Remove references to url_quote filterSimon Green2012-01-122-5/+1
* Bug 715902: Do not log personal common activities in audit_logFrédéric Buclin2012-01-128-3/+23
* Bug 717210: If all attachments are stored locally (maxattachmentsize = 0, max...Simon Green2012-01-112-3/+3
* Bug 591638: In the admin page, the link to edit field values is named 'Field ...A. Shimono2012-01-111-1/+1
* Bug 715650 - User auto-completion does not work in request.cgi for requester ...Dave Lawrence2012-01-111-1/+2
* Bug 716227: When checksetup.pl tells the admin that he should edit variables ...Frédéric Buclin2012-01-112-9/+14
* Bug 716283: Clickjacking in the attachment "Details" page allows to bypass to...Frédéric Buclin2012-01-102-0/+13
* Bug 706753 about JSON::RPC 1.01 is now fixedFrédéric Buclin2012-01-061-4/+0
* Bug 695294: The See Also field is not visible in "Format for Printing"Matt Selsky2012-01-061-0/+12
* Bug 319684: The documentation is unclear about how to disable quipsMatt Selsky2012-01-061-7/+12
* Bug 641957: The documentation should mention that the voting system is now an...Matt Selsky2012-01-061-0/+5
* Bug 715705: User auto-completion doesn't work for watched users in the email ...Frédéric Buclin2012-01-061-1/+2
* Bug 714664: The content of the "emailregexpdesc" parameter is not escaped whe...Frédéric Buclin2012-01-062-2/+2
* Bug 706753: Bugzilla will not work with newest version of JSON::RPC 1.01 due ...Frédéric Buclin2012-01-051-1/+12
* Bump the version number post-releaseDave Lawrence2011-12-291-1/+1
* Bump version for 4.2rc1release-4.2rc1bugzilla-4.2rc1Dave Lawrence2011-12-282-3/+3
* Bug 711714: (CVE-2011-3667) [SECURITY] The User.offer_account_by_email WebSer...Frédéric Buclin2011-12-285-46/+51
* Bug 697699 - (CVE-2011-3657) [SECURITY] XSS when viewing new charts or tabula...Byron Jones2011-12-282-3/+3
* user_autocompletion -> ajax_user_autocompletionFrédéric Buclin2011-12-281-1/+1
* Bug 713346: Release notes for Bugzilla 4.2rc1Frédéric Buclin2011-12-282-3418/+4037
* Bug 713144: The SQL query to remove older searches from the profile_search ta...Frédéric Buclin2011-12-281-6/+8
* Bug 683644: Foreign keys aren't renamed correctly when DB tables are renamedFrédéric Buclin2011-12-267-30/+121
* Bug 711925: Update from 4.0 or older to 4.2 or trunk fails when bug_see_also ...Frédéric Buclin2011-12-192-2/+2
* Fix bustage due to bug 705474Frédéric Buclin2011-12-171-0/+1
* Last Comment Bug 685611 - delta_ts is updated even when no changes are made t...Dave Lawrence2011-12-163-3/+35