Commit Graph

134869 Commits

Author SHA1 Message Date
justdave%bugzilla.org
b0a51a539c Bump version number to 2.19.1 for snapshot release 2004-10-25 07:43:45 +00:00
justdave%bugzilla.org
62149a61ff [SECURITY] Bug 250605: Changes to the metadata (filename, description, mime type, review flags) on attachments which were flagged as private get displayed to users who are not members of the group allowed to see private attachments when receiving bug change notification mails. This only affects sites that use the 'insidergroup' feature.
Patch by Joel Peshkin <bugreport@peshkin.net>
r=kiko,justdave, a=justdave
2004-10-25 07:36:13 +00:00
justdave%bugzilla.org
195002eeb3 [SECURITY] Bug 253544: Changes to the metadata (filename, description, mime type, review flags) on attachments which were flagged as private get displayed to users who are not members of the group allowed to see private attachments when viewing the bug activity log. This only affects sites that use the 'insidergroup' feature.
Patch by Joel Peshkin <bugreport@peshkin.net>
r=zach,justdave, a=justdave
2004-10-25 07:33:20 +00:00
justdave%bugzilla.org
71685cbefa [SECURITY] Bug 263780: Exporting a bug to XML exposes user comments and attachment summaries which are marked as private to users who are not members of the group allowed to see private comments and attachments. XML export is not exposed in the user interface, but is available to anyone who knows the correct URL to invoke it. This only affects sites that use the 'insidergroup' feature.
Patch by Joel Peshkin <bugreport@peshkin.net>
r=vladd,justdave, a=justdave
2004-10-25 07:25:58 +00:00
justdave%bugzilla.org
a9ae7dc999 [SECURITY] Bug 252638: It is possible to send a carefully crafted HTTP POST message to process_bug.cgi which will remove keywords from a bug even if you don't have permissions to edit all bug fields (the "editbugs" permission). Such changes are reported in "bug changed" email notifications, so they are easily detected and reversed if someone abuses it.
Patch by Myk Melez <myk@mozilla.org>
r=gerv, a=justdave
2004-10-25 07:19:05 +00:00
justdave%bugzilla.org
5a97cc9bea Bug 250897: Enforce a 10 minute waiting period between password reset attempts to prevent the user getting mailbombed if the form is submitted multiple times.
Patch by Joel Peshkin <bugreport@peshkin.net>
r=kiko, a=justdave
2004-10-25 07:12:22 +00:00
steffen.wilberg%web.de
fcff7bf8d0 forgot to bump the date 2004-10-25 07:09:54 +00:00
steffen.wilberg%web.de
47cff92852 Bug 265849: there's no longer an Options button in the Download Manager. p=als@mozilla.ru, r=me 2004-10-25 07:02:54 +00:00
timeless%mozdev.org
5f1b6329f9 Bug 157994 Code in in nsDataObj.cpp prone to buffer overflow , and generally awful
patch by daniel_atallah@yahoo.com r=dean_tessman sr=sfraser
2004-10-25 06:15:52 +00:00
timeless%mozdev.org
0cdccd40c7 http://www.mozilla.org/hacking/portable-cpp.html
Be careful of the scoping of variables declared inside for() statements.
2004-10-25 05:51:24 +00:00
mrbkap%gmail.com
bc10b9ad7a Add a regression test for bug 256731 2004-10-25 05:25:52 +00:00
justdave%bugzilla.org
c76cd588ce Bug 254498: Check for comment required for time validation was too late.
Patch by Tiago R. Mello <tiago@async.com.br>
r=kiko, a=justdave
2004-10-25 04:49:32 +00:00
justdave%bugzilla.org
f9cc55e94e Backing out patch for bug 251596: found a problem with it after I committed. See the bug. 2004-10-25 04:35:30 +00:00
justdave%bugzilla.org
5b1d0d890e Bug 251596: show.html.tmpl wasn't using the customized body attribute
Patch by Marc Schumann <wurblzap@gmail.com>
r=kiko, a=myk
2004-10-25 04:28:32 +00:00
bienvenu%nventure.com
cfb935052f close db's as we go downloading newsgroups for offline use, sr=mscott 142278 2004-10-25 04:16:04 +00:00
bienvenu%nventure.com
4a3d3b4efc fix rename of virtual imap folders, sr=mscott 265507 2004-10-25 02:38:45 +00:00
bzbarsky%mit.edu
65e9d20d1b Fixing build bustage fallout from bug 253941. 2004-10-25 01:14:33 +00:00
bzbarsky%mit.edu
e151180cb4 Er.. doing this right. 2004-10-25 01:12:16 +00:00
bzbarsky%mit.edu
3d11d067c6 Don't use ?: because that depends on implicit conversion of pointers to
nsQueryInterface.  Fixing build bustage from bug 253941.
2004-10-25 01:07:57 +00:00
bugzilla%arlen.demon.co.uk
ecbd9f5cb4 Bug 264102 Chrome should use document.title instead of window.title - editor fixes (without EdColorPicker.js changes as these will be fixed in the patch to bug 260217)
p=me r=daniel sr=neil.parkwaycc.co.uk
2004-10-25 00:39:27 +00:00
jocuri%softhome.net
ed4eadf795 Documentation patch for bug 143490: Update documentation regarding code changes needed when running Bugzilla under win32 (some are no longer required since checksetup.pl no longer calls unsupported functions when running on Windows); patch by GavinS <bugzilla@chimpychompy.org>, r=vladd. 2004-10-24 23:54:37 +00:00
jocuri%softhome.net
bb1559d660 Patch for bug 192218: Ability to use a hyphen as a way to filter specifically for requests with no requestee; patch by Fr�d�ric Buclin <LpSolit@netscape.net>; r=myk, a=myk. 2004-10-24 23:34:20 +00:00
jocuri%softhome.net
820c52f4eb Patch for bug 252137: tabular reports shouldn't be broken if a row/col/tbl header begins with an underscore; patch by Rob Siklos <rsiklos@adexa.com>; r=gerv, a=justdave. 2004-10-24 23:25:54 +00:00
steffen.wilberg%web.de
b7834b4312 Bug 263482: focus the search box when switching to search sidebar in Help Viewer. r=bryner 2004-10-24 23:14:16 +00:00
silver%warwickcompsoc.co.uk
ef8a009765 Bug 249462 - Put ChatZilla XPI building tools into CVS.
ChatZilla only.
r=rginda
2004-10-24 23:04:15 +00:00
bugzilla%arlen.demon.co.uk
0d921bb0b8 Bug 111484 Hide/Show platform-specific references in help files
p=stefan_h@hem.utfors.se r=me
2004-10-24 23:02:26 +00:00
neil%parkwaycc.co.uk
1dbdacbc2f Deprecate window.title b=264102 r=jst sr=peterv 2004-10-24 22:57:06 +00:00
bugzilla%arlen.demon.co.uk
d97bc68618 Bug 264102 Chrome should use document.title instead of window.title - mailnews fixes (apart from sendProgress.js which will be in fix to bug 260217)
p=me r=neil.parkwaycc.co.uk sr=bienvenu
2004-10-24 22:51:01 +00:00
silver%warwickcompsoc.co.uk
3a3892d987 Bug 262037 - Only search for plugins to remove by URL, not ID.
ChatZilla only.
r=rginda
p=samuel@sieb.net (Samuel Sieb)
2004-10-24 22:49:27 +00:00
bzbarsky%mit.edu
31412e926b Make sure to insert the floating items as children of their parent before
clobbering the float items in the constructor state when a table cell is
floated.  Bug 263846, r+sr=roc
2004-10-24 22:03:49 +00:00
silver%warwickcompsoc.co.uk
e2bbca1bfa Bug 261711 - Treat '330' message the same as other whois lines.
ChatZilla only.
r=samuel@sieb.net
2004-10-24 20:03:45 +00:00
bzbarsky%mit.edu
371fe4de66 Reduce amount of refcounting in PopState. Bug 261024, r+sr=bryner 2004-10-24 19:37:16 +00:00
silver%warwickcompsoc.co.uk
65f8ac487e Bug 255494 - Correctly clear pref observer system. Prevents hitting pref system crash (bug 265788).
ChatZilla only.
r=rginda
2004-10-24 19:35:08 +00:00
silver%warwickcompsoc.co.uk
eb1c1f7ef6 Bug 265414 - Don't call createInstance on a service CID. Also optimises utility code to createInstance and adds a getService utility function.
ChatZilla only.
r=rginda
2004-10-24 19:31:38 +00:00
bugzilla%arlen.demon.co.uk
ad77c6b01a Bug 145926 Navigator Preferences - DOM Inspector help content needed
p=stefan_h@hem.utfors.se r=me
2004-10-24 19:28:41 +00:00
bugzilla%arlen.demon.co.uk
8495166d6a Bug 251548 Minor nits and cruft removal from composer_help.xhtml
p=giacomo.magnini@portalis.it r=me/neil.parkwaycc.co.uk
2004-10-24 19:23:51 +00:00
bugzilla%arlen.demon.co.uk
db041de28a Bug 262080 Cruft removal/additional fixes for mozilla help files - cruftremovalnew4 fixes
p=giacomo.magnini@portalis.it r=me
2004-10-24 18:46:42 +00:00
bugzilla%arlen.demon.co.uk
f4194e5834 Bug 262080 Cruft removal/additional fixes for mozilla help files - developer tools patch
p=giacomo.magnini@portalis.it r=neil.parkwaycc.co.uk
2004-10-24 18:37:18 +00:00
bzbarsky%mit.edu
a2afb45863 "Mozilla Xprint 2004/Q3 update". Bug 262287, patch by Julien Lafon
<julien.lafon@gmail.com>, r=roland.mainz, sr=henry.jia
2004-10-24 18:34:50 +00:00
julien.pierre.bugs%sun.com
781aca838b Fix for bug 262192 . assert and check attribute ptr 2004-10-24 18:31:27 +00:00
julien.pierre.bugs%sun.com
464720d125 Fix for bug 265707 - SECMOD_FindSlot always returns NULL. r=relyea 2004-10-24 18:25:04 +00:00
bugzilla%arlen.demon.co.uk
ff6e7a4194 Bug 264102 Chrome should use document.title instead of window.title - toolkit fixes
p=me r=vladimir
2004-10-24 18:20:10 +00:00
bugzilla%arlen.demon.co.uk
08fce4ba87 Bug 264102 Chrome should use document.title instead of window.title - xmlterm fixes
p=me r=neil.parkwaycc.co.uk
2004-10-24 18:10:59 +00:00
bugzilla%arlen.demon.co.uk
68d8703e8e Bug 264102 Chrome should use document.title instead of window.title - xpfe fixes
p=me r/sr=neil.parkwaycc.co.uk
2004-10-24 17:52:18 +00:00
bugzilla%arlen.demon.co.uk
e75f78361a Bug 264102 Chrome should use document.title instead of window.title - sroaming fixes
p=me r=ben.bucksch
2004-10-24 17:48:06 +00:00
bugzilla%arlen.demon.co.uk
04d4e14d2d Bug 264102 Chrome should use document.title instead of window.title - venkman fixes
p=me r=rginda
2004-10-24 17:45:21 +00:00
bugzilla%arlen.demon.co.uk
1e020212f1 Bug 260364 Fixup radiogroups to use new .value functionality of radio.xml - mail patch
p=me r=mscott
2004-10-24 17:41:57 +00:00
joshmoz%gmail.com
5d66148191 clean out some old stuff pertaining to classic Mac OS (bug 231337) r=sdagley sr=bzbarsky 2004-10-24 17:36:11 +00:00
bzbarsky%mit.edu
8cf7d0e9af Make vertical marquees actually be 200px height by default. Bug 265631,
original patch by Martijn Wargers <m.wargers@hccnet.nl> with some changes by
me, r=doron, sr=jst
2004-10-24 17:33:22 +00:00
mrbkap%gmail.com
27b107ff22 bug 263083: view-source now reports tokenization-level errors in HTML and XML. r=rbs sr=dmose 2004-10-24 17:32:30 +00:00