Commit Graph

35 Commits

Author SHA1 Message Date
timeless%mozdev.org
eb9350f619 Bug 106386 Correct misspellings in source code
patch by unknown@simplemachines.org r=timeless rs=brendan
2005-11-25 19:48:04 +00:00
cls%seawood.org
1c0aef9012 Fix XSS vulnerability in rview.cgi
Bug #276984 r=timeless
2005-11-18 20:30:28 +00:00
cls%seawood.org
a2f175a182 Remove duplicate /s when parsing path in canonpath().
Return the canonicalized path from ChrootFilename().
2004-12-20 19:04:30 +00:00
timeless%mozdev.org
d14b2e7431 Bug 275007 . enables directory browsing
r=cls
2004-12-17 07:06:47 +00:00
cls%seawood.org
0e160fd89e Checkin comments aren't guaranteed to be UTF-8 clean so use 'use bytes' to avoid UTF-8 perl errors. This makes bonsai require perl 5.6 or higher.
Bug #271529 r=timeless
2004-12-07 07:04:34 +00:00
cls%seawood.org
12155513a9 Arbitrarily bump version number to 1.3.9. 2004-12-01 19:07:27 +00:00
cls%seawood.org
47cb389e36 Use DBI placeholders to avoid SQL injection issues.
Bug #260894 r=timeless,justdave
2004-12-01 08:28:06 +00:00
cls%seawood.org
e21a9e642d Remove undef check from SanitizeModule 2004-12-01 06:35:28 +00:00
cls%seawood.org
0f10bab80d Fix misc warnings.
Bug #261616 r=timeless
2004-12-01 00:43:28 +00:00
cls%seawood.org
c6e5f68341 Throw an error if the datadir doesn't exist rather than blindly creating it.
Bug #261616 r=timeless
2004-12-01 00:36:30 +00:00
cls%seawood.org
42bf1ea441 Add check routines to sanitize user input.
Rename sanitize_revision to SanitizeRevision and move it to globals.pl.
Bug #261616 r=timeless
2004-11-30 23:56:13 +00:00
cls%seawood.org
3d64033baa Move shell_escape from CGI.pl to globals.pl
Remove CGI.pl dependency from multidiff.cgi
Bug #44642
2004-09-22 03:59:19 +00:00
cls%seawood.org
f0886ed803 Remove 'use diagnostics' calls to speed up scripts.
Bug #204463 r=justdave
2004-09-18 05:02:17 +00:00
cls%seawood.org
7c6b8ae693 Allow bonsai (dolog.pl) to properly handle filenames with spaces.
Thanks to zeuice@yahoo.com for the original patch.
Bug #44642
2004-09-16 05:47:19 +00:00
cls%seawood.org
f2f73e6054 Misc cleanup to better handle files with spaces & special chars:
* Do not encode / in url_quote
* Do not install old/unused perl scripts
* Update README
* Replace system(rm/mkdir) calls with standard perl modules
* Use url_quote to quote filenames when passing files between cgis
* Use shell_escape on filenames that are passed to system calls via open()

Bug #44642 r=timeless
2004-09-15 15:48:18 +00:00
cls%seawood.org
edec492a36 Strip ./ from the beginning of dirnames since that ./ causes bonsai to see ./CVSROOT & /CVSROOT as different directories.
Bug #253644 r=timeless
2004-09-13 21:00:58 +00:00
tara%tequilarista.org
f3946ba8a2 Checking in slightly modified patch, originally submitted by
eperez@dei.inf.uc3m.es, for bug #133737.  Standardizes Bonsai
dates into international format, as it should be.
2004-03-22 18:04:17 +00:00
justdave%syndicomm.com
1afce0b8e8 Bug 202116: Use current syntax for DBI->connect to eliminate warning and possible future error.
r= timeless
2003-10-01 04:29:52 +00:00
tara%tequilarista.org
752636b24f checking in David Berry's patch for bug 157682 2003-05-02 06:45:25 +00:00
myk%mozilla.org
42866b21e9 Partial fix for bug 163573: Escapes HTML in form data displayed to the user to secure Bonsai against cross-site scripting attacks.
r=tara
2002-08-20 21:32:07 +00:00
tara%tequilarista.org
334253837a Checking in Myk's fix for bug #142317 2002-05-30 13:55:10 +00:00
tara%tequilarista.org
133606438f Landing Adam Spiers' contributions for security and small functional issues 2000-07-25 18:58:54 +00:00
cyeh%bluemartini.com
52f95fd1e5 add missing call SqlFmtClock()
that was supposed to be a part of 1.4 of repophook.cgi.
2000-05-30 21:56:39 +00:00
endico%mozilla.org
86c00dc4b1 perform system calls in a more secure manner at suggestion of Adam Spiers <adam@spiers.net> 2000-05-20 01:15:42 +00:00
terry%mozilla.org
410c63285a Added DisconnectFromDatabase() routine. 2000-02-07 23:46:07 +00:00
dmose%mozilla.org
2db9bdbbbe updated license boilerplate 1999-11-01 23:33:56 +00:00
terry%mozilla.org
996672cca2 Update version to 1.3 (which means unstable, tip-of-CVS version). 1999-10-26 15:49:58 +00:00
terry%mozilla.org
fc9cbecfa5 Make version number be 1.2, we will be spinning a tarball. 1999-10-26 15:37:12 +00:00
terry%mozilla.org
3ab95a75a2 newer alphas of MySQL won't let use "when" as a column name, so let's change
our usage while it's still easy to do so.
1999-10-12 18:05:42 +00:00
terry%mozilla.org
d445116d20 Patch by Ian Wells <I.Wells@tarragon-et.co.uk> -- disable JavaScript
magic on IE (where it wasn't working), other minor cleanups.
1999-09-17 15:47:03 +00:00
terry%mozilla.org
c56c1e0786 Fix some Y2K issues! Now, don't freak out. The only real bug was
that lists of checkins would have started displaying the year as "100"
in the year 2000.  I have changed to display 4-digit years throughout.
1999-08-05 22:49:38 +00:00
terry%mozilla.org
7ddbcc752a Fixed bug 10812 -- LXR paths were not getting generated correctly. 1999-07-30 01:28:32 +00:00
terry%mozilla.org
4e5f708eaf Munge usernames containing "%" into an "@" when determining email address. 1999-07-23 22:12:29 +00:00
terry%mozilla.org
197ec9c792 Let me tweak the parameters to DBI->connect(). 1999-07-23 19:14:37 +00:00
terry%mozilla.org
61b2e0b068 Massive patch (mostly from Dieter Weber <dieter@Compatible.COM>) -- ported all TCL code to Perl. 1999-07-23 18:39:31 +00:00