aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* update release notesrelease-5.0.5Dylan William Hardison2019-01-301-0/+9
|
* Bug 981487 - change bugs_fulltext from myisam to innodbDylan William Hardison2019-01-302-12/+5
|
* no bug - reformat all the code using the new perltidy rulesPerl Tidy2019-01-30281-57005/+59679
|
* Bug 1226123 - Email addresses with an apostrophe in them break the "Send ↵Arshad Kazmi2018-09-251-1/+1
| | | | Mail to Bug Assignees" button in buglists
* add a new hook: template_after_create (#60)Dylan William Hardison2018-03-213-0/+29
|
* bug 1429243 - Fix default values for version and op_sys when importing from ↵Quanah Gibson-Mount2018-03-201-1/+2
| | | | Jitterbugs
* Bumped versions post-releaseDavid Lawrence2018-02-161-1/+1
|
* Bumped version to 5.0.4release-5.0.4David Lawrence2018-02-161-1/+1
|
* Bug 1438593: Release notes for Bugzilla 5.0.4David Lawrence2018-02-161-0/+21
| | | | r/a=dylan
* Bug 1433400 (CVE-2018-5123) Prevent cross-site image requests from leaking ↵Dylan William Hardison2018-02-162-0/+65
| | | | | | contents of certain fields due to regex search r=jfearn,a=dylan
* Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=1427623 by setting (#57)Quanah Gibson-Mount2018-01-041-0/+1
| | | the priority on import
* Significant update to jb2bz.py. (#58)Quanah Gibson-Mount2018-01-041-56/+65
| | | | | | | | | | | | | | | | | | | | | | | | Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=1427626 Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=1427638 Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=1427664 Convert jb2bz to use "email" module rather than rfc822, multifile, mimetools, and StringIO for easier manipulation of the mailbox objects. This fixed (among other things) 1427626 as the Subject of the email is now obtained correctly. Fix the date formatting throughout to always use UTC, which is what Bugzilla expects for the dates. This fixed 1427638. Fix attachment processing, which was using multifile rather than walking the parts of the email object. This fixed part of 1427664 Fix the fact that the process_reply_file function never checked for attachments in any followups. This fixed part of 1427664 Fix attachment processor to ignore various signatures and message/rfc822 multipart messages. For the latter, it sets "filename=" values to files that don't actually exist, which caused attachment processing to bomb.
* Bug 1301887 - File::Slurp triggers warnings on perl 5.24 (#53)Vitaly Belekhov2018-01-049-28/+44
| | | | | | | | | | * Bug 1301887 - File::Slurp triggers warnings on perl 5.24 and it is recommended to not use it (#21) r=mtyson * Fix for vrite in aa735d4 * Added https://gitweb.gentoo.org/proj/gentoo-bugzilla.git/commit/?id=ca7bfc9c485c959fad2aee1f7c1dbc0fb484553b
* Bug 1398100 - tiny tweaks to release notesGervase Markham2017-09-081-1/+2
|
* Revert "Bug 1306534 - Crash when pasting UTF8 text as an attachment"Dylan William Hardison2016-10-191-1/+0
| | | | This reverts commit 89cb60fe38a7962c876bce18368db90cedda84eb.
* Bug 1310728 - editflagtypes.cgi crashes when classifications are enabled and ↵Frédéric Buclin2016-10-171-1/+1
| | | | | | the user hasn't global editcomponents privs r/a=dkl
* Bug 1306534 - Crash when pasting UTF8 text as an attachmentMatt Tyson2016-10-111-0/+1
| | | | r=dylan
* nit: wrong method call in Bugzilla::MigrateDylan William Hardison2016-10-081-1/+1
|
* Bug 1300437 - DateTime::TimeZone::offset_as_string called incorrectly (#19)Dylan William Hardison2016-10-082-2/+2
|
* Bug 1303702 - bug history table 'when' column shows 00:00 only using sqliteAndrea Orsini2016-09-191-0/+1
| | | | r/a=dylan
* - New CI docker image for testingDavid Lawrence2016-09-071-17/+19
|
* Bug 1292510 - replace references to git.mozilla.org with references to ↵Gervase Markham2016-08-057-6/+18
| | | | github. r=dylan
* Fix the default API URLFrédéric Buclin2016-06-011-2/+2
|
* Bug 1269266 - API links for Bugzilla 5+ not working anymoreFrédéric Buclin2016-06-012-6/+5
|
* Bug 1273846 - Checksetup fails to update chart storage during pre-3.6 -> 5.0 ↵Frédéric Buclin2016-05-201-9/+8
| | | | | | upgrade r/a=dkl
* Bumped version post-releaseDavid Lawrence2016-05-161-1/+1
|
* Bumped version to 5.0.3release-5.0.3David Lawrence2016-05-161-1/+1
|
* Bug 1253263 - (CVE-2016-2803) [SECURITY] XSS vulnerability in dependency ↵Frédéric Buclin2016-05-161-1/+7
| | | | | | graphs via bug summary r/a=dkl
* Bug 1269388 - Release notes for Bugzilla 5.0.3Frédéric Buclin2016-05-131-0/+34
| | | | r=dkl
* Bug 1250114 - XSS possible in extensions calling global/tabs.html.tmpl if ↵Dylan William Hardison2016-05-131-1/+1
| | | | tab.link is user-controlled
* Add build.platform = linux64, machine.platform = linux64 to taskgraph.json ↵David Lawrence2016-05-021-6/+42
| | | | to remove b2gtest from Treeherder results
* Bug 1259881 - CSV export vulnerable to formulae injection (again)Frédéric Buclin2016-04-251-3/+4
| | | | r=sgreen a=dkl
* Bug 542239 - Accept pronouns everywhere in query.cgiAlbert Ting2016-04-202-2/+3
| | | | r=dkl,a=dkl
* Bug 1232171 - 'make clean' shouldn't delete rst/, images/ and Makefile, only ↵Frédéric Buclin2016-04-151-1/+1
| | | | | | generated files r=gerv
* Email::MIME::Attachment::Stripper is no longer used, see bug 437076Frédéric Buclin2016-04-101-2/+1
|
* Fix an incorrect URL in the documentationFrédéric Buclin2016-04-091-1/+1
|
* Bug 1204957 - Locally compiled POD documentation is no longer accessible ↵Frédéric Buclin2016-04-094-12/+25
| | | | | | from docs/en/html/api/ r=dkl
* Bug 1246228 - Email addresses must not be encodedFrédéric Buclin2016-04-062-14/+4
| | | | r/a=dkl
* Bug 1261124: When deleting a component, this component is listed againFrédéric Buclin2016-04-051-1/+4
| | | | r/a=dkl
* Bug 1260027: Document how to compile the documentation on WindowsFrédéric Buclin2016-04-012-12/+32
| | | | r=gerv
* Bug 1200010: The Quick Start doc should stop assuming Bugzilla is your ↵Frédéric Buclin2016-04-011-16/+12
| | | | | | single application r=gerv
* Bug 987742 (part 2): correctly detaint $ENV{PATH} on Strawberry PerlFrédéric Buclin2016-03-271-0/+1
|
* Bug 1255619: CGI scripts should not send duplicated headersFrédéric Buclin2016-03-214-36/+7
| | | | r/a=dkl
* Bug 1230932: Providing a condition as an ID to the webservice results in a ↵Frédéric Buclin2016-03-194-3/+23
| | | | | | taint error r/a=dkl
* Bug 1253267: Possible DOT injection vulnerability in dependency graphs if ↵Frédéric Buclin2016-03-151-0/+3
| | | | | | long bug summaries are wrapped r/a=dkl
* Bug 1250908: "Use of uninitialized value" warning thrown when creating a new ↵Thorsten Schöning2016-03-091-2/+2
| | | | | | bug depending or blocking another one r=LpSolit a=dkl
* Bug 1234977: Replace \d+ by [0-9]+ in critical validation placesFrédéric Buclin2016-03-095-21/+22
| | | | r=dylan a=dkl
* IIS instructions work with Windows 10 tooFrédéric Buclin2016-03-061-1/+2
|
* Bug 1250354: The "Forgot password" link should not be displayed if users ↵Frédéric Buclin2016-02-231-23/+25
| | | | | | are not allowed to change it r/a=dkl
* Bug 1250264: Extensions have no easy way to override favicon.icoFrédéric Buclin2016-02-221-1/+2
| | | | r/a=dkl