Commit Graph

2847 Commits

Author SHA1 Message Date
justdave%bugzilla.org
72c748e28b Bump version number to 2.19.1+ to indicate version pulled from CVS. 2004-10-25 11:35:14 +00:00
justdave%bugzilla.org
b0a51a539c Bump version number to 2.19.1 for snapshot release 2004-10-25 07:43:45 +00:00
justdave%bugzilla.org
62149a61ff [SECURITY] Bug 250605: Changes to the metadata (filename, description, mime type, review flags) on attachments which were flagged as private get displayed to users who are not members of the group allowed to see private attachments when receiving bug change notification mails. This only affects sites that use the 'insidergroup' feature.
Patch by Joel Peshkin <bugreport@peshkin.net>
r=kiko,justdave, a=justdave
2004-10-25 07:36:13 +00:00
justdave%bugzilla.org
195002eeb3 [SECURITY] Bug 253544: Changes to the metadata (filename, description, mime type, review flags) on attachments which were flagged as private get displayed to users who are not members of the group allowed to see private attachments when viewing the bug activity log. This only affects sites that use the 'insidergroup' feature.
Patch by Joel Peshkin <bugreport@peshkin.net>
r=zach,justdave, a=justdave
2004-10-25 07:33:20 +00:00
justdave%bugzilla.org
71685cbefa [SECURITY] Bug 263780: Exporting a bug to XML exposes user comments and attachment summaries which are marked as private to users who are not members of the group allowed to see private comments and attachments. XML export is not exposed in the user interface, but is available to anyone who knows the correct URL to invoke it. This only affects sites that use the 'insidergroup' feature.
Patch by Joel Peshkin <bugreport@peshkin.net>
r=vladd,justdave, a=justdave
2004-10-25 07:25:58 +00:00
justdave%bugzilla.org
a9ae7dc999 [SECURITY] Bug 252638: It is possible to send a carefully crafted HTTP POST message to process_bug.cgi which will remove keywords from a bug even if you don't have permissions to edit all bug fields (the "editbugs" permission). Such changes are reported in "bug changed" email notifications, so they are easily detected and reversed if someone abuses it.
Patch by Myk Melez <myk@mozilla.org>
r=gerv, a=justdave
2004-10-25 07:19:05 +00:00
justdave%bugzilla.org
5a97cc9bea Bug 250897: Enforce a 10 minute waiting period between password reset attempts to prevent the user getting mailbombed if the form is submitted multiple times.
Patch by Joel Peshkin <bugreport@peshkin.net>
r=kiko, a=justdave
2004-10-25 07:12:22 +00:00
justdave%bugzilla.org
c76cd588ce Bug 254498: Check for comment required for time validation was too late.
Patch by Tiago R. Mello <tiago@async.com.br>
r=kiko, a=justdave
2004-10-25 04:49:32 +00:00
justdave%bugzilla.org
f9cc55e94e Backing out patch for bug 251596: found a problem with it after I committed. See the bug. 2004-10-25 04:35:30 +00:00
justdave%bugzilla.org
5b1d0d890e Bug 251596: show.html.tmpl wasn't using the customized body attribute
Patch by Marc Schumann <wurblzap@gmail.com>
r=kiko, a=myk
2004-10-25 04:28:32 +00:00
jocuri%softhome.net
ed4eadf795 Documentation patch for bug 143490: Update documentation regarding code changes needed when running Bugzilla under win32 (some are no longer required since checksetup.pl no longer calls unsupported functions when running on Windows); patch by GavinS <bugzilla@chimpychompy.org>, r=vladd. 2004-10-24 23:54:37 +00:00
jocuri%softhome.net
bb1559d660 Patch for bug 192218: Ability to use a hyphen as a way to filter specifically for requests with no requestee; patch by Fr�d�ric Buclin <LpSolit@netscape.net>; r=myk, a=myk. 2004-10-24 23:34:20 +00:00
jocuri%softhome.net
820c52f4eb Patch for bug 252137: tabular reports shouldn't be broken if a row/col/tbl header begins with an underscore; patch by Rob Siklos <rsiklos@adexa.com>; r=gerv, a=justdave. 2004-10-24 23:25:54 +00:00
justdave%bugzilla.org
7dc0b918c5 Bug 265731: multipart_start in the server-push handling code wasn't honoring the $cgi->charset setting.
r=myk, a=justdave
2004-10-23 09:04:16 +00:00
myk%mozilla.org
2f0c4e26bf fix for bug 265499: support custom stylesheets; r=gerv, a=myk 2004-10-21 21:47:34 +00:00
myk%mozilla.org
58df7c52ab fix for bug 263250: adds a base tag to the simple buglist so it can be loaded in an iframe on a remote site and have the CSS still work 2004-10-21 19:13:28 +00:00
myk%mozilla.org
2b4cd0e446 fix for bug 256208: makes checksetup.pl create CVS-ignored skins/custom/ and children; r=gerv, a=justdave 2004-10-21 19:05:22 +00:00
myk%mozilla.org
6a78d0277b Fix for bug 256207: moves CSS files to skins/standard/ as part of CSS plan; r=gerv, a=justdave 2004-10-21 19:02:30 +00:00
myk%mozilla.org
aedb51d8be Fix for bug 265240: make collectstats generate valid RDF by not cutting off the opening RDF tag; r=kiko, a=myk 2004-10-20 23:00:45 +00:00
jocuri%softhome.net
f78e4dcd3f Patch for bug 232155: Remove uninitialized value warning from Pperl's Cookie.pm and unify code by removing redundancy; patch by Christian Reis <kiko@async.com.br> backported to 2.18 by Rob Siklos <rsiklos@adexa.com>; r=vladd,kiko, a=justdave. 2004-10-20 20:58:45 +00:00
myk%mozilla.org
867bde718a Fix for bug 265303: updates RDF content type to new standard application/rdf+xml; r,a=justdave 2004-10-20 20:48:29 +00:00
jocuri%softhome.net
085434b456 Patch for bug 264003: Include the DBI error in the error message if 'createdb' fails; patch by Byron Jones (glob) <bugzilla@glob.com.au>; r=kiko, a=justdave. 2004-10-19 20:33:27 +00:00
jocuri%softhome.net
09b53317a1 Patch for bug 189073: Allow accept as a resolution when changing multiple bugs only if all bugs are opened; r=kiko, a=justdave. 2004-10-19 20:11:34 +00:00
jocuri%softhome.net
17768c0ffb Patch for bug 199811: Implement UI for 'contains none of the strings' search operator; patch by Marc Schumann <wurblzap@gmail.com>, r=kiko, a=justdave. 2004-10-19 20:02:43 +00:00
jocuri%softhome.net
6976bb0f22 Patch for bug 261434: implement functionality to delete a user semi-properly (only works for users with no bugs/comments); patch by Ivan Todoroski <grnch@gmx.net>; r=justdave, a=justdave. 2004-10-17 11:07:39 +00:00
jocuri%softhome.net
5e1c4aeb42 Patch for bug 251338: Installation section should mention that you need an MTA installed; patch by Colin S. Ogilvie <colin.ogilvie@gmail.com>; r=vladd, a=justdave. 2004-10-09 20:49:42 +00:00
jocuri%softhome.net
f837994ebd Patch for bug 257765: Make replies to private comments private by default; patch by Marc Schumann <wurblzap@gmail.com>, r=kiko, a=justdave. 2004-10-09 20:39:51 +00:00
jocuri%softhome.net
36bdeed877 Patch for bug 263165: Make Bugzilla specify table type as MyISAM when creating tables; patch by Byron Jones (glob) <bugzilla@glob.com.au>, r=kiko, a=justdave. 2004-10-09 20:21:39 +00:00
jocuri%softhome.net
9e25419df2 Patch for bug 256567: Harmonize descriptions of classifications and products in terms of 'FILTER html'; patch by Marc Schumann <wurblzap@gmail.com>; r=justdave, kiko, a=justdave. 2004-10-07 07:12:40 +00:00
jocuri%softhome.net
acc5cefead Patch for bug 262126: fix invalid date parsing; patch by me, r=kiko, a=justdave. 2004-09-30 22:47:17 +00:00
jocuri%softhome.net
789ba29f99 Patch for bug 261210: adapt bz_secure CSS for text based browsers; patch by Jason Pyeron <jpyeron@pyerotechnics.com>; r=myk, a=myk. 2004-09-30 22:43:57 +00:00
jocuri%softhome.net
21ca15c693 Patch for bug 258712: whine.pl should honour emailsuffix; patch by Marc Schumann <wurblzap@gmail.com>; r=erik, a=justdave. 2004-09-30 21:40:49 +00:00
jocuri%softhome.net
f34bbf06b7 Patch for bug 237769: use Administrator instead of root for super-user name in Windows, and change the ppm repository from Apache to the one maintained on landfill; patch by Byron Jones (glob) <bugzilla@glob.com.au>; r=vladd, a=myk. 2004-09-29 23:39:37 +00:00
jocuri%softhome.net
fbbad095b2 Patch for bug 261993: fix uninitialized value error in webserver log when accessing buglist.cgi (generated by the fix for bug 255512); patch by Marc Schumann <wurblzap@gmail.com>; r=justdave, a=myk. 2004-09-29 22:37:17 +00:00
myk%mozilla.org
241d4ec401 Fix for bug 103794: adds 'home' link to navigation bar; patch by GavinS; r,a=myk 2004-09-27 22:55:29 +00:00
erik%dasbistro.com
1409f7ca10 Fix for bug 258029: sets whining group inheritance in the correct order. r,a=justdave 2004-09-25 00:06:44 +00:00
kiko%async.com.br
a3b879505c Fix for bug 261446: checksetup.pl needs to update permissions on
images/. r,a=myk
2004-09-24 20:49:51 +00:00
kiko%async.com.br
d1ab62e597 Landing fix for bug 153811: default severity should be parametrized.
r,a=myk.
2004-09-24 20:41:30 +00:00
myk%mozilla.org
d9b1862909 Fix for bug 252739: moves inclusion/exclusion action names to button name instead of button value so that button values (which are also used as labels) will be localizable; patch by Marc Schumann; r=kiko,myk; a=justdave 2004-09-24 01:01:30 +00:00
myk%mozilla.org
03bbc8db42 Fix for bug 261273: make column changing work with Sun ONE web server; fix by tmabbott@hbs.edu; r,a=justdave 2004-09-24 00:53:26 +00:00
timeless%mozdev.org
d08552d8a1 Bug 261071 Error: Error in parsing value for property 'vertical-align'. Declaration dropped.
r=vladd a=myk
2004-09-23 21:17:12 +00:00
jocuri%softhome.net
366121aeb3 Patch for bug 258938: Minor tweak to editmilestones templatization; patch by GavinS <bugzilla@chimpychompy.org>; r=jouni, a=justdave. 2004-09-23 19:14:13 +00:00
jocuri%softhome.net
604a856e97 Patch for bug 255512: For bz_secure, distinguish between mandatory and non-mandatory groups and create distinct CSS classes to enable customizations by the admin; patch by Marc Schumann <wurblzap@gmail.com>; r=kiko, r=joel, a=justdave. 2004-09-23 19:05:20 +00:00
kiko%async.com.br
376fa8e696 Landing fix for bug 260411: MS IE breaks png alpha channel padlock. Adds
a new PNG file with a 1-bit alpha layer. File by Jason Pyeron
<jpyeron@pyerotechnics.com> r=kiko, a=myk.
2004-09-23 18:08:31 +00:00
timeless%mozdev.org
e5cc8af8a8 Bug 259452 Add bonsai style &mark support to showbug for bug comments
r=kiko a=justdave
2004-09-21 19:56:19 +00:00
myk%mozilla.org
256bfa463c Fix for bug 245075: command-line script that sends bug mail so installations can push bug mail out if it's been missed by the code that sends mail when changes are made; written by Dave Miller 2004-09-21 00:58:32 +00:00
gerv%gerv.net
bb8661aa05 Bug 250979 - fix broken anchors to severity. Patch by Tobias Sager <moixa@gmx.ch>, r=gerv, a=justdave. 2004-09-18 11:33:10 +00:00
justdave%bugzilla.org
37931ee9fb Bug 256004: Fix regression that caused duplicate sortkeys in the fielddefs table
r=myk, a=justdave
2004-09-15 00:58:32 +00:00
myk%mozilla.org
bf6545f387 Fix for bug 249868: makes series pages validate 2004-09-14 23:30:20 +00:00
myk%mozilla.org
2a740cfae6 Fix for bug 240460: updates upgrading examples with new URLs and version numbers; r=gerv; a=justdave 2004-09-14 23:04:38 +00:00