1. 27 May, 2012 1 commit
  2. 20 Apr, 2012 1 commit
  3. 11 Jan, 2012 1 commit
  4. 08 Aug, 2011 1 commit
  5. 27 Apr, 2011 2 commits
  6. 18 Jul, 2010 1 commit
  7. 04 Dec, 2009 1 commit
  8. 10 Nov, 2009 3 commits
  9. 26 Oct, 2009 1 commit
  10. 19 Oct, 2009 1 commit
  11. 05 Aug, 2009 1 commit
  12. 10 Apr, 2009 1 commit
  13. 30 Mar, 2009 1 commit
  14. 05 Mar, 2009 1 commit
  15. 05 Feb, 2009 1 commit
  16. 29 Jan, 2009 1 commit
  17. 26 Nov, 2008 1 commit
  18. 04 Jun, 2008 1 commit
  19. 17 Mar, 2008 1 commit
  20. 20 Aug, 2007 1 commit
  21. 08 Aug, 2007 1 commit
  22. 19 Apr, 2007 1 commit
  23. 07 Jan, 2007 1 commit
  24. 11 Oct, 2006 1 commit
  25. 10 Sep, 2006 1 commit
  26. 07 Sep, 2006 1 commit
  27. 04 Sep, 2006 1 commit
  28. 03 Jul, 2006 1 commit
  29. 27 Jun, 2006 1 commit
  30. 22 Feb, 2006 1 commit
  31. 08 Nov, 2005 1 commit
  32. 07 Sep, 2005 1 commit
  33. 01 Sep, 2005 1 commit
  34. 04 Aug, 2005 1 commit
  35. 17 Jan, 2005 1 commit
  36. 07 Dec, 2004 1 commit
  37. 25 Oct, 2004 1 commit
    • justdave%bugzilla.org's avatar
      [SECURITY] Bug 263780: Exporting a bug to XML exposes user comments and… · 53bd4df6
      justdave%bugzilla.org authored
      [SECURITY] Bug 263780: Exporting a bug to XML exposes user comments and attachment summaries which are marked as private to users who are not members of the group allowed to see private comments and attachments.  XML export is not exposed in the user interface, but is available to anyone who knows the correct URL to invoke it.  This only affects sites that use the 'insidergroup' feature.
      Patch by Joel Peshkin <bugreport@peshkin.net>
      r=vladd,justdave, a=justdave
      53bd4df6