blame jeff

r=dkl a=sgreen

r=gerv a=justdave

r=LpSolit a=glob

r=dkl a=LpSolit

Bug 824399: (CVE-2013-0786) [SECURITY] build_subselect() leaks the existence of products and components you cannot access
r/a=LpSolit

r=dkl a=LpSolit

r=dkl a=LpSolit

Bug 676844: Replace ThrowCodeError() by ThrowUserError() when the error is not triggered by the code itself
r=glob a=LpSolit

r=glob a=LpSolit

r=glob a=LpSolit

r=wicked a=LpSolit

r=dkl a=LpSolit

r/a=LpSolit

r=gerv a=LpSolit

Bug 680131: Replace the MPL 1.1 license by the MPL 2.0 one in all files, and add it to files which miss one
r=kiko r=mkanat r=mrbball a=LpSolit

Bug 697699 - (CVE-2011-3657) [SECURITY] XSS when viewing new charts or tabular and graphical reports in debug mode
r=gerv, a=LpSolit

r=glob a=LpSolit

Bug 610739: YUI-generated tabular reports do not work if only one axis is set
Bug 617676: Wrong URLs in the "Total" row at the bottom of tabular reports when JS is enabled
Bug 655848: Use of uninitialized value $tbl in string eq at /var/www/html/bugzilla/report.cgi line 162
r/a=LpSolit

https://bugzilla.mozilla.org/show_bug.cgi?id=617641

an error.
r=LpSolit, a=mkanat

r=mkanat, a=mkanat (module owner)

r/a=mkanat

a=LpSolit

r/a=LpSolit

r/a=mkanat

instead of taking a CGI object.
r=mkanat, a=mkanat (module owner)

it and having its work be done by a new "sql" accessor instead. Also adds
some comments, moves functions around into sections, and creates a new
_user accessor.
r=mkanat, a=mkanat (module owner)

instead of from a static list
r=glob, a=mkanat

Bug 565879: Merge ThrowCodeError("action_unrecognized"), ThrowUserError("no_valid_action") and ThrowCodeError("unknown_action")
r=ghendricks a=LpSolit

r=timello, a=mkanat

r/a=mkanat

r=mkanat, a=mkanat, a=LpSolit

r=dkl, a=mkanat

 patch by ghendricks@novell.com, r=mkanat, a=mkanat

Bug 520948: Use Bugzilla->feature and feature_enabled everywhere instead of checking if modules are installed
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Bug 491467: Make Search.pm and buglist.cgi consistently take column ids for the "fields" and "order" arguments, to prevent problems with using SQL fragments in the order and columnlist.
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=wicked, a=mkanat