justdave%bugzilla.org
533ee21022
Bug 325919: dramatic speed increase in history rebuilds by making it only correct mistakes and add new records instead of holding a database lock while we let MySQL decide if the record's been touched or not.
...
r=timeless
2006-06-13 18:03:07 +00:00
cls%seawood.org
a7501c0803
Check SERVER_PORT when validating referers
...
Bug #284372 r=timeless
2006-05-16 05:23:22 +00:00
justdave%bugzilla.org
3d488d52e6
Bug 326775: properly escape cvsroot parameter.
...
r=timeless
2006-03-25 06:26:29 +00:00
timeless%mozdev.org
a49d6d8bf6
Bug 326070 bonsai mailto: highlighting is too greedy
...
r=lpsolit
2006-02-06 16:55:46 +00:00
timeless%mozdev.org
eb9350f619
Bug 106386 Correct misspellings in source code
...
patch by unknown@simplemachines.org r=timeless rs=brendan
2005-11-25 19:48:04 +00:00
cls%seawood.org
1c0aef9012
Fix XSS vulnerability in rview.cgi
...
Bug #276984 r=timeless
2005-11-18 20:30:28 +00:00
cls%seawood.org
a2f175a182
Remove duplicate /s when parsing path in canonpath().
...
Return the canonicalized path from ChrootFilename().
2004-12-20 19:04:30 +00:00
timeless%mozdev.org
d14b2e7431
Bug 275007 . enables directory browsing
...
r=cls
2004-12-17 07:06:47 +00:00
cls%seawood.org
0e160fd89e
Checkin comments aren't guaranteed to be UTF-8 clean so use 'use bytes' to avoid UTF-8 perl errors. This makes bonsai require perl 5.6 or higher.
...
Bug #271529 r=timeless
2004-12-07 07:04:34 +00:00
cls%seawood.org
12155513a9
Arbitrarily bump version number to 1.3.9.
2004-12-01 19:07:27 +00:00
cls%seawood.org
47cb389e36
Use DBI placeholders to avoid SQL injection issues.
...
Bug #260894 r=timeless,justdave
2004-12-01 08:28:06 +00:00
cls%seawood.org
e21a9e642d
Remove undef check from SanitizeModule
2004-12-01 06:35:28 +00:00
cls%seawood.org
0f10bab80d
Fix misc warnings.
...
Bug #261616 r=timeless
2004-12-01 00:43:28 +00:00
cls%seawood.org
c6e5f68341
Throw an error if the datadir doesn't exist rather than blindly creating it.
...
Bug #261616 r=timeless
2004-12-01 00:36:30 +00:00
cls%seawood.org
42bf1ea441
Add check routines to sanitize user input.
...
Rename sanitize_revision to SanitizeRevision and move it to globals.pl.
Bug #261616 r=timeless
2004-11-30 23:56:13 +00:00
cls%seawood.org
3d64033baa
Move shell_escape from CGI.pl to globals.pl
...
Remove CGI.pl dependency from multidiff.cgi
Bug #44642
2004-09-22 03:59:19 +00:00
cls%seawood.org
f0886ed803
Remove 'use diagnostics' calls to speed up scripts.
...
Bug #204463 r=justdave
2004-09-18 05:02:17 +00:00
cls%seawood.org
7c6b8ae693
Allow bonsai (dolog.pl) to properly handle filenames with spaces.
...
Thanks to zeuice@yahoo.com for the original patch.
Bug #44642
2004-09-16 05:47:19 +00:00
cls%seawood.org
f2f73e6054
Misc cleanup to better handle files with spaces & special chars:
...
* Do not encode / in url_quote
* Do not install old/unused perl scripts
* Update README
* Replace system(rm/mkdir) calls with standard perl modules
* Use url_quote to quote filenames when passing files between cgis
* Use shell_escape on filenames that are passed to system calls via open()
Bug #44642 r=timeless
2004-09-15 15:48:18 +00:00
cls%seawood.org
edec492a36
Strip ./ from the beginning of dirnames since that ./ causes bonsai to see ./CVSROOT & /CVSROOT as different directories.
...
Bug #253644 r=timeless
2004-09-13 21:00:58 +00:00
tara%tequilarista.org
f3946ba8a2
Checking in slightly modified patch, originally submitted by
...
eperez@dei.inf.uc3m.es , for bug #133737 . Standardizes Bonsai
dates into international format, as it should be.
2004-03-22 18:04:17 +00:00
justdave%syndicomm.com
1afce0b8e8
Bug 202116: Use current syntax for DBI->connect to eliminate warning and possible future error.
...
r= timeless
2003-10-01 04:29:52 +00:00
tara%tequilarista.org
752636b24f
checking in David Berry's patch for bug 157682
2003-05-02 06:45:25 +00:00
myk%mozilla.org
42866b21e9
Partial fix for bug 163573: Escapes HTML in form data displayed to the user to secure Bonsai against cross-site scripting attacks.
...
r=tara
2002-08-20 21:32:07 +00:00
tara%tequilarista.org
334253837a
Checking in Myk's fix for bug #142317
2002-05-30 13:55:10 +00:00
tara%tequilarista.org
133606438f
Landing Adam Spiers' contributions for security and small functional issues
2000-07-25 18:58:54 +00:00
cyeh%bluemartini.com
52f95fd1e5
add missing call SqlFmtClock()
...
that was supposed to be a part of 1.4 of repophook.cgi.
2000-05-30 21:56:39 +00:00
endico%mozilla.org
86c00dc4b1
perform system calls in a more secure manner at suggestion of Adam Spiers <adam@spiers.net>
2000-05-20 01:15:42 +00:00
terry%mozilla.org
410c63285a
Added DisconnectFromDatabase() routine.
2000-02-07 23:46:07 +00:00
dmose%mozilla.org
2db9bdbbbe
updated license boilerplate
1999-11-01 23:33:56 +00:00
terry%mozilla.org
996672cca2
Update version to 1.3 (which means unstable, tip-of-CVS version).
1999-10-26 15:49:58 +00:00
terry%mozilla.org
fc9cbecfa5
Make version number be 1.2, we will be spinning a tarball.
1999-10-26 15:37:12 +00:00
terry%mozilla.org
3ab95a75a2
newer alphas of MySQL won't let use "when" as a column name, so let's change
...
our usage while it's still easy to do so.
1999-10-12 18:05:42 +00:00
terry%mozilla.org
d445116d20
Patch by Ian Wells <I.Wells@tarragon-et.co.uk> -- disable JavaScript
...
magic on IE (where it wasn't working), other minor cleanups.
1999-09-17 15:47:03 +00:00
terry%mozilla.org
c56c1e0786
Fix some Y2K issues! Now, don't freak out. The only real bug was
...
that lists of checkins would have started displaying the year as "100"
in the year 2000. I have changed to display 4-digit years throughout.
1999-08-05 22:49:38 +00:00
terry%mozilla.org
7ddbcc752a
Fixed bug 10812 -- LXR paths were not getting generated correctly.
1999-07-30 01:28:32 +00:00
terry%mozilla.org
4e5f708eaf
Munge usernames containing "%" into an "@" when determining email address.
1999-07-23 22:12:29 +00:00
terry%mozilla.org
197ec9c792
Let me tweak the parameters to DBI->connect().
1999-07-23 19:14:37 +00:00
terry%mozilla.org
61b2e0b068
Massive patch (mostly from Dieter Weber <dieter@Compatible.COM>) -- ported all TCL code to Perl.
1999-07-23 18:39:31 +00:00