Commit Graph

30 Commits

Author SHA1 Message Date
justdave%bugzilla.org
ba1638aa02 Bug 314591: remove references to /usr/bonsaitools/bin
r=timeless
2006-01-13 16:57:25 +00:00
cls%seawood.org
1c0aef9012 Fix XSS vulnerability in rview.cgi
Bug #276984 r=timeless
2005-11-18 20:30:28 +00:00
timeless%mozdev.org
21d1193558 Bug 274080 dot files not listed by rview.cgi
r=cls
2004-12-17 07:21:26 +00:00
cls%seawood.org
f078ee86fd Sanitize form inputs.
Bug 261616 r=timeless
2004-12-01 04:25:22 +00:00
cls%seawood.org
0b3b8eed19 Fix page layout.
Bug #261616 r=timeless
2004-12-01 00:32:49 +00:00
cls%seawood.org
fc87798b71 Verify that the given cvsroot is actually in our repository list.
Bug #261616 r=timeless
2004-12-01 00:22:53 +00:00
cls%seawood.org
42bf1ea441 Add check routines to sanitize user input.
Rename sanitize_revision to SanitizeRevision and move it to globals.pl.
Bug #261616 r=timeless
2004-11-30 23:56:13 +00:00
cls%seawood.org
6653ecac41 Fix security issue related to unsanitized rcs version strings:
* Added sanitize_revision()
* Do not install SourceChecker.*
* Add ~ & ` to shell_escape()
Bug #39284 r=timeless
2004-09-15 22:44:55 +00:00
timeless%mozdev.org
33bcbe95a0 Bug 204464 Name "main::script_type" used only once: possible typo at /opt/webtools/bonsai/rview.cgi line 221.
r=justdave
2004-04-20 14:10:30 +00:00
timeless%mozdev.org
7b2b98e617 Bug 240202 rview <form>s are poorly nested
r=kiko
2004-04-14 06:37:21 +00:00
timeless%mozdev.org
1cb5928ed1 Bug 215475 bonsai browsing busted
patch by justdave r=timeless
2003-08-24 07:16:11 +00:00
tara%tequilarista.org
2604bf7e0f Temporary security fix for feature that allowed users to browse via ../ in the Goto Dir field to the top of the disk. Long term a better solution might be a little more friendly, but this holds us over 2003-07-30 20:54:07 +00:00
timeless%mac.com
c0b7e7d826 Bug 12180 Menu overlaps filenames
Bug 88759 improperly nested tags break links
r=tara
2002-06-19 07:00:18 +00:00
timeless%mac.com
692c34b6a4 Bug 144837 bonsai file display always shows trunk revision
r=tara
2002-05-30 04:45:11 +00:00
jake%acutex.net
e61bb9f70d Bug 121105 - type="application/x-javascript" confuses IE, so we should use the new $::script_type variable added in bug 123339.
r= kiko
2002-02-13 14:19:07 +00:00
timeless%mac.com
6034436643 Bug 106470 Bonsai rview.cgi unclosed html comment tag
patch by pzb@datastacks.com r=justdave
2001-12-20 20:46:01 +00:00
timeless%mac.com
61d2900ff9 Bug 27506 The Bonsai pages contain SCRIPTs which are not enclosed in
<!-- -->, greatly confusing some HTML parsers.
r=kiko
2001-10-11 18:44:14 +00:00
terry%mozilla.org
04276b4a04 Add a param to control where to look for the "registry" stuff. 2000-01-30 19:46:41 +00:00
dmose%mozilla.org
2db9bdbbbe updated license boilerplate 1999-11-01 23:33:56 +00:00
terry%mozilla.org
f3d48d098e Fixed stupid perl warning. 1999-10-20 00:27:16 +00:00
terry%mozilla.org
c484cf50dc Fixed perl warnings. 1999-10-19 16:41:40 +00:00
terry%mozilla.org
d43d834edd Massive spank to put "use strict" in all Bonsai code. 1999-10-18 22:55:01 +00:00
terry%mozilla.org
82f7d53541 Patches by Scott Heavner <sheavner@adaclabs.com> -- wording, wasn't displaying correct directory name. 1999-09-21 20:30:38 +00:00
terry%mozilla.org
d445116d20 Patch by Ian Wells <I.Wells@tarragon-et.co.uk> -- disable JavaScript
magic on IE (where it wasn't working), other minor cleanups.
1999-09-17 15:47:03 +00:00
terry%mozilla.org
7e7bff3bf0 Removed incorrect munging of the directory name. 1999-08-23 18:01:43 +00:00
terry%mozilla.org
d315e9330d Backed out code Dieter put in that tried to restrict the view to only
directories in the current module.  I think it was buggy, and it is
not behavior I particularly want anyway.
1999-07-26 23:46:04 +00:00
terry%mozilla.org
61b2e0b068 Massive patch (mostly from Dieter Weber <dieter@Compatible.COM>) -- ported all TCL code to Perl. 1999-07-23 18:39:31 +00:00
terry
1bd88542ae Patch from Matthew Wilson <msw@gimp.org> -- keep the popup layer in a reasonable place on the screen. 1998-06-26 18:12:08 +00:00
terry
860e5e5305 Implement CheckHidden(), so that we can have some semblance of security. 1998-06-18 16:47:00 +00:00
terry
d79fe8cf1e Bonsai and Tinderbox have been freed. 1998-06-16 21:43:24 +00:00