Bug 824399: (CVE-2013-0786) [SECURITY] build_subselect() leaks the existence of products and components you cannot access
r/a=LpSolit

r=dkl a=LpSolit

r=dkl a=LpSolit

r=LpSolit, a=LpSolit

r=wicked a=LpSolit

r= LpSolit, a=LpSolit

r=dkl, a=LpSolit

r=glob a=LpSolit

r=glob a=LpSolit

r=timello a=LpSolit

r/a=LpSolit

Bug 754672 - CSRF vulnerability in buglist.cgi allows possible unauthorized setting of default search options
[r=LpSolit a=LpSolit]

Bug 616191: Implement UI to easily tag bugs from the bug report directly (and get rid of the current form in the footer)
r=timello a=LpSolit

r/a=LpSolit

Bug 745397: (CVE-2012-0466) [SECURITY] The JS template for buglists permits attackers to access all bugs that the victim can see
r=glob a=LpSolit

r=dkl a=LpSolit

r=LpSolit, r=LpSolit

r=glob a=LpSolit

Bug 680131: Replace the MPL 1.1 license by the MPL 2.0 one in all files, and add it to files which miss one
r=kiko r=mkanat r=mrbball a=LpSolit

Bug 644281: When the sort order of a buglist is modified, the "Show next bug in my list" user pref still uses the original sort order to decide which bug to display next
r=glob a=LpSolit

r/a=mkanat

r/a=mkanat

r/a=mkanat

r=timello a=LpSolit

"Custom Search" UI.
r=timello, a=mkanat

requests to see more.
r=dkl, a=mkanat

Bug 480044: Use dashes instead of colons to separate bug IDs in the BUGLIST cookie, because colons are HTML-escaped, making the cookie bigger than the 4k limit
r=mkanat a=LpSolit

instead of the field name, and have the buglist.cgi link give you CSV like
this by default.
r=mkanat, a=mkanat

r=mkanat, a=mkanat (module owner)

r/a=mkanat

r/a=mkanat

even Saved Searches get "last list" support.
r=LpSolit, a=LpSolit

r/a=mkanat

r/a=mkanat

instead of taking a CGI object.
r=mkanat, a=mkanat (module owner)

it and having its work be done by a new "sql" accessor instead. Also adds
some comments, moves functions around into sections, and creates a new
_user accessor.
r=mkanat, a=mkanat (module owner)

multiple buglists at once
r=glob, a=mkanat

Bug 565879: Merge ThrowCodeError("action_unrecognized"), ThrowUserError("no_valid_action") and ThrowCodeError("unknown_action")
r=ghendricks a=LpSolit

r/a=mkanat