aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Bugzilla/Util: disable BiDi tr safetyRobin H. Johnson2020-01-301-1/+8
| | | | | | | | | | | Perl Safe.pm and 5.30 don't interact well, the following expression is disabled. This introduces a small risk of BiDi characters being added to bugs. Reference: https://bugzilla.mozilla.org/show_bug.cgi?id=1588175 Reference: https://rt.perl.org/Public/Bug/Display.html?id=72942 Reference: https://github.com/Perl/perl5/issues/17271 Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* no bug - perltidy again, using the latest releasePerl Tidy2019-01-311-5/+5
| | | | blame jeff
* no bug - reformat all the code using the new perltidy rulesPerl Tidy2019-01-301-667/+717
|
* Bug 1301887 - File::Slurp triggers warnings on perl 5.24 (#53)Vitaly Belekhov2018-01-041-1/+26
| | | | | | | | | | * Bug 1301887 - File::Slurp triggers warnings on perl 5.24 and it is recommended to not use it (#21) r=mtyson * Fix for vrite in aa735d4 * Added https://gitweb.gentoo.org/proj/gentoo-bugzilla.git/commit/?id=ca7bfc9c485c959fad2aee1f7c1dbc0fb484553b
* Bug 1300437 - DateTime::TimeZone::offset_as_string called incorrectly (#19)Dylan William Hardison2016-10-081-1/+1
|
* Bug 1234977: Replace \d+ by [0-9]+ in critical validation placesFrédéric Buclin2016-03-091-2/+2
| | | | r=dylan a=dkl
* Bug 1202447: [SECURITY] The email address is not properly validated during ↵Byron Jones ‹:glob›2015-09-101-3/+9
| | | | | | registration if longer than 127 characters r=LpSolit,a=justdave
* Bug 1068014: skip strptime() in datetime_from() if the date is in a standard ↵Byron Jones2014-09-181-3/+8
| | | | | | format r=dylan,a=glob
* Bug 1046213: datetime_from() generates wrong dates if year < 1901Frédéric Buclin2014-09-081-3/+7
| | | | r=sgreen a=glob
* Bug 996893: Perl 5.18 and newer throw tons of warnings about deprecated modulesFrédéric Buclin2014-08-131-0/+1
| | | | r=dkl a=sgreen
* Bug 1003852: Digest::SHA 5.82 and newer always croak on wide characters, ↵Frédéric Buclin2014-05-121-5/+5
| | | | | | preventing users with Unicode passwords from logging in r/a=glob
* Bug 968576: [SECURITY] Dangerous control characters allowed in Bugzilla textManish Goregaokar2014-04-171-0/+4
| | | | r=glob a=justdave
* Bug 947823: Replace gender-specific pronouns with gender-neutral pronounsCharlie Somerville2014-02-271-1/+1
| | | | r=gerv a=justdave
* Bug 950491: When viewing a dependency graph, an "uninitialized value" ↵Frédéric Buclin2013-12-191-1/+1
| | | | | | warning is thrown r/a=sgreen
* Bug 916633 - join_activity_entries doesn't reconstitute text with commas ↵Simon Green2013-11-081-2/+3
| | | | | correctly. r=glob, a=sgreen
* Bug 917669 - invalid or expired authentication tokens and cookies should ↵Dave Lawrence2013-09-261-2/+15
| | | | | | throw errors, not be silently ignored r/a=glob
* Bug 853638 - Status and resolution values in dependency graphs not localizable.Marc Schumann2013-08-151-1/+1
| | | | r=dkl, a=sgreen
* Bug 898830: Improve loading time of show_bug.cgiFrédéric Buclin2013-08-091-2/+5
| | | | r=sgreen a=justdave
* Bug 885646: Bugzilla::BugMail::_get_diff should rejoin split activity entriesSimon Green2013-07-091-1/+37
| | | | r=glob, a=justdave
* Bug 785283 - Support increased values for PASSWORD_SALT_LENGTH without ↵Reed Loden2012-12-311-4/+3
| | | | | | breaking compat with old hashes [r=LpSolit a=LpSolit]
* Bug 787668: Use |use parent| instead of |use base|Matt Selsky2012-12-011-1/+1
| | | | r/a=LpSolit
* Bug 816747 - Add dummy POD for unPODded methods.Marc Schumann2012-11-301-0/+16
| | | | r/a=LpSolit
* Bug 804093: Fix autodetected charset for windows-1252 encoded contentThorsten Schöning2012-11-271-3/+3
| | | | r=glob,a=LpSolit
* Bug 797636: Improve performance for buglistsFrédéric Buclin2012-11-161-10/+11
| | | | r=dkl a=LpSolit
* Bug 676844: Replace ThrowCodeError() by ThrowUserError() when the error is ↵Frédéric Buclin2012-11-121-1/+1
| | | | | | not triggered by the code itself r=glob a=LpSolit
* Bug 772359: LogActivityEntry shouldn't remove any characters from the field ↵Byron Jones2012-10-251-3/+3
| | | | | | when splitting long lines; and delimiters need to be inserted when joining split entries r=LpSolit, a=LpSolit
* Bug 577329 - WebServices should filter email addresses same as the web UI as ↵Dave Lawrence2012-10-161-1/+1
| | | | | | users are not always required to login r/a=LpSolit
* Bug 795650: Cache the HTML::Scrubber object for improved performanceFrédéric Buclin2012-10-081-8/+11
| | | | r=glob a=LpSolit
* Bug 787529: Use |use 5.10.1| everywhereFrédéric Buclin2012-09-011-2/+2
| | | | r=wicked a=LpSolit
* Bug 655477: Bugzilla now requires Perl 5.10.1Frédéric Buclin2012-08-311-19/+2
| | | | r=mkanat a=LpSolit
* Bug 635882: html_light_quote() should accept the "target" attribute for linksKoosha Khajeh Moogahi2012-06-261-6/+7
| | | | r/a=LpSolit
* Bug 747189: Remove Bugzilla::Util::file_mod_time()Matt Selsky2012-04-261-25/+1
| | | | r/a=LpSolit
* Bug 728639: (CVE-2012-0465) [SECURITY] User lockout policy can be bypassed ↵Frédéric Buclin2012-04-181-3/+105
| | | | | | by altering the X-FORWARDED-FOR header r=glob a=LpSolit
* Bug 554819: Quicksearch should be using Text::ParseWords instead of custom ↵Frédéric Buclin2012-03-291-16/+1
| | | | | | | code in splitString Also fixes QS with accented characters (bug 730207) r=dkl a=LpSolit
* Bug 319953: Missing real email syntax checkFrédéric Buclin2012-01-231-2/+24
| | | | r=glob a=LpSolit
* Bug 680131: Replace the MPL 1.1 license by the MPL 2.0 one in all files, and ↵Frédéric Buclin2012-01-111-26/+5
| | | | | | add it to files which miss one r=kiko r=mkanat r=mrbball a=LpSolit
* Bug 703928: Bugzilla::Util should depend on Bugzilla::Error, not the oppositeFrédéric Buclin2011-11-211-16/+10
| | | | r=dkl a=LpSolit
* cancelled -> canceledFrédéric Buclin2011-11-191-1/+1
| | | https://bugzilla.mozilla.org/show_bug.cgi?id=703788
* Bug 703788: Improve performance of diff_arrays() with large arraysFrédéric Buclin2011-11-191-26/+29
| | | | r/a=mkanat
* Bug 696537: Load DateTime only when datetime_from() is calledFrédéric Buclin2011-11-181-2/+3
| | | | r/a=mkanat
* Bug 662070: Use say() instead of print() where appropriateFrédéric Buclin2011-08-171-3/+9
| | | | r=glob a=LpSolit
* Bug 658407: Make Bugzilla not use Math::Random::Secure anymore, due to theMax Kanat-Alexander2011-08-041-1/+1
| | | | | | difficulty of installing its dependencies. Instead move the code directly into Bugzilla itself. r=LpSolit, r=glob, a=mkanat
* Bug 659816: Fix url_decoding of utf8 stringsByron Jones2011-05-301-4/+1
| | | | r=mkanat, a=mkanat
* revert accidental property changesByron Jones2011-03-091-0/+0
|
* Bug 633776: Automatic charset detection for text attachmentsByron Jones2011-03-091-1/+67
| | | | r=mkanat, a=mkanat
* Bug 620827: Refactor remove see also to use remove_from_db instead.Tiago Mello2011-02-101-7/+19
| | | | r/a=mkanat
* Bug 619594: (CVE-2010-4568) [SECURITY] Improve the randomness ofMax Kanat-Alexander2011-01-241-1/+8
| | | | | | | generate_random_password, to protect against an account compromise issue and other critical vulnerabilities. r=LpSolit, a=LpSolit https://bugzilla.mozilla.org/show_bug.cgi?id=621591
* Bug 595410: Make it faster to display a bug that has a lot of dependencies.Max Kanat-Alexander2011-01-031-0/+9
| | | | r=LpSolit, a=LpSolit
* Bug 573195: Make Bug.get return all of a bug's standard and custom fieldMax Kanat-Alexander2010-09-291-3/+12
| | | | | information r=dkl, a=mkanat
* Bug 466968: Remove hardcoded strings from BugMail.pm, and refactor it so ↵Frédéric Buclin2010-08-061-19/+1
| | | | | | that bugmails are 100% localizable r/a=mkanat