https://bugzilla.mozilla.org/show_bug.cgi?id=616453

Bug 619588: (CVE-2010-4567) [SECURITY] Safety checks that disallow clicking for javascript: or data: URLs in the URL field can be evaded with prefixed whitespace

and

Bug 628034: (CVE-2011-0048) [SECURITY] For not-logged-in users, the URL field doesn't safeguard against javascript: or data: URLs

r=dkl a=LpSolit

Bug 619648: (CVE-2010-4570) [SECURITY] XSS via summary in "possible duplicates" table due to lack of encoding by YUI
[r=mkanat a=LpSolit]

r=dkl a=LpSolit

r=dkl a=LpSolit

r=dkl a=LpSolit

release notes.

https://bugzilla.mozilla.org/show_bug.cgi?id=627910

r=reed

[r=reed a=LpSolit]

r/a=mkanat

r=dkl a=mkanat

r/a=mkanat

Bug 627660 - Rename "Send" button on final create account page to "Create", as nothing is actually sent.
[r=mkanat a=mkanat]

r/a=mkanat

r/a=mkanat

r/a=mkanat

r=dkl a=LpSolit

r/a=LpSolit

r=dkl a=LpSolit

r/a=mkanat

https://bugzilla.mozilla.org/show_bug.cgi?id=617012

r=LpSolit, a=LpSolit

r/a=LpSolit

r/a=mkanat

r/a=mkanat

r=glob, a=mkanat

They are all deprecated since Bugzilla 2.19.
r/a=mkanat

and Bugzilla::Bug. See https://bugzilla.mozilla.org/show_bug.cgi?id=617477#c2
for details.
r=LpSolit, a=LpSolit

a=LpSolit (module owner)

Bug 607675: In Firefox, YAHOO.util.Event.addListener/on events no longer exist after a user clicks back
r:LpSolit, a:mkanat

r/a=LpSolit

https://bugzilla.mozilla.org/show_bug.cgi?id=615570

r/a=LpSolit

r/a=mkanat

r=LpSolit r=mkanat a=mkanat

r=mkanat a=LpSolit

Bug 419014: (CVE-2010-3764) [SECURITY] Old charts are not project specific, and product names are viewable in graphs/
r=wurblzap a=LpSolit

r=pyrzak a=LpSolit

r=wicked a=mkanat

is required
r=LpSolit, a=mkanat