[SECURITY] Bug 263780: Exporting a bug to XML exposes user comments and attachment summaries which are marked as private to users who are not members of the group allowed to see private comments and attachments.  XML export is not exposed in the user interface, but is available to anyone who knows the correct URL to invoke it.  This only affects sites that use the 'insidergroup' feature.
Patch by Joel Peshkin <bugreport@peshkin.net>
r=vladd,justdave, a=justdave

r=kiko a=justdave

Patch for bug 87770: make attachment.cgi work with no parameters; patch by GavinS <bugzilla@chimpychompy.org>; r=kiko; a=myk.

that, swapping them for calls to cgi->param/cookie. r=vladd,justdave; a=justdave.

quietly_check_login()/confirm_login() calls.  Cleans up callsites
(consisting of most of our CGIs), swapping (where appropriate) for calls
to Bugzilla->login. Patch by Teemu Mannermaa <wicked@etlicon.fi>.
r=bbaetz, kiko. a=justdave.

Bug 192516: Moving the loose .pm files into the Bugzilla directory, where they belong.  These files pre-date the Bugzilla directory, and would have gone there had it existed at the time.  The four files in question were copied on the CVS server to preserve CVS history in the files.  This checkin deletes them from the old location and modifies everything else to know where they are now.
r= myk, gerv
a= justdave

links if it is not there (bug 215268)

r=joel, a=justdave

r=justdave
a=justdave

Bug 136603 - show_bug.cgi's XML retrieval needs a summary mode. Patch by gerv; r=bbaetz, a=justdave.

r=gerv, justdave
a=justdave

r=justdave, joel
a=justdave

r=joel x2

Patch by Brad Baetz <bbaetz@student.usyd.edu.au>
r= jake, justdave

Checking in Jake's <jake@acutex.net> interim patches from bug 30694. Bugzilla was showing bug summaries to everyone, even if they didn't have permission to view the bug. Jake's quick solution is to not display the bug at all if it is in a group no matter who is viewing it. The correct solution would be display the  summary if the viewer had the proper permissions.

Patch from Jake <jake@acutex.net> for bugs 22041 and 25693 which had the same problem. HTML meta characters in the summary were not being quoted before being printed to html.

Fix for bug 22041: Bug page title now includes bug summary.  Patch by st.n@gmx.net (Stephan Niemz (faniz))

me.  Added a footer to every page.  Add some options to do things like
display checkboxes instead of scrolling lists, and a new formatting
for email diffs, and show list items capitalized instead of all upper
case.

and there were fixed, and serverpush was restricted only to the versions
of Mozilla known to support it.

turned on): target_milestone, qa_contact, and status_whiteboard.