affb267674
Remove duplicate /s when parsing path in canonpath().
...
Return the canonicalized path from ChrootFilename().
2004-12-20 19:04:30 +00:00
bf52e181d9
Bug 275007 . enables directory browsing
...
r=cls
2004-12-17 07:06:47 +00:00
9efb19dd5a
Checkin comments aren't guaranteed to be UTF-8 clean so use 'use bytes' to avoid UTF-8 perl errors. This makes bonsai require perl 5.6 or higher.
...
Bug #271529 r=timeless
2004-12-07 07:04:34 +00:00
bc09188df9
Arbitrarily bump version number to 1.3.9.
2004-12-01 19:07:27 +00:00
a9b19dd3f6
Use DBI placeholders to avoid SQL injection issues.
...
Bug #260894 r=timeless,justdave
2004-12-01 08:28:06 +00:00
a82e086e5f
Remove undef check from SanitizeModule
2004-12-01 06:35:28 +00:00
9d7a9968e0
Fix misc warnings.
...
Bug #261616 r=timeless
2004-12-01 00:43:28 +00:00
e4362f92b4
Throw an error if the datadir doesn't exist rather than blindly creating it.
...
Bug #261616 r=timeless
2004-12-01 00:36:30 +00:00
3820500cbd
Add check routines to sanitize user input.
...
Rename sanitize_revision to SanitizeRevision and move it to globals.pl.
Bug #261616 r=timeless
2004-11-30 23:56:13 +00:00
371f30f86d
Move shell_escape from CGI.pl to globals.pl
...
Remove CGI.pl dependency from multidiff.cgi
Bug #44642
2004-09-22 03:59:19 +00:00
aab913d4e0
Remove 'use diagnostics' calls to speed up scripts.
...
Bug #204463 r=justdave
2004-09-18 05:02:17 +00:00
a7b3fdd693
Allow bonsai (dolog.pl) to properly handle filenames with spaces.
...
Thanks to zeuice@yahoo.com for the original patch.
Bug #44642
2004-09-16 05:47:19 +00:00
fc202fce77
Misc cleanup to better handle files with spaces & special chars:
...
* Do not encode / in url_quote
* Do not install old/unused perl scripts
* Update README
* Replace system(rm/mkdir) calls with standard perl modules
* Use url_quote to quote filenames when passing files between cgis
* Use shell_escape on filenames that are passed to system calls via open()
Bug #44642 r=timeless
2004-09-15 15:48:18 +00:00
abc2bd35d9
Strip ./ from the beginning of dirnames since that ./ causes bonsai to see ./CVSROOT & /CVSROOT as different directories.
...
Bug #253644 r=timeless
2004-09-13 21:00:58 +00:00
d5ccbacff6
Checking in slightly modified patch, originally submitted by
...
eperez@dei.inf.uc3m.es , for bug #133737 . Standardizes Bonsai
dates into international format, as it should be.
2004-03-22 18:04:17 +00:00
49685bc7a1
Bug 202116: Use current syntax for DBI->connect to eliminate warning and possible future error.
...
r= timeless
2003-10-01 04:29:52 +00:00
61f7230fba
checking in David Berry's patch for bug 157682
2003-05-02 06:45:25 +00:00
8894e9ba8f
Partial fix for bug 163573: Escapes HTML in form data displayed to the user to secure Bonsai against cross-site scripting attacks.
...
r=tara
2002-08-20 21:32:07 +00:00
22b7e86c06
Checking in Myk's fix for bug #142317
2002-05-30 13:55:10 +00:00
2f015d5f63
Landing Adam Spiers' contributions for security and small functional issues
2000-07-25 18:58:54 +00:00
b98adc130f
add missing call SqlFmtClock()
...
that was supposed to be a part of 1.4 of repophook.cgi.
2000-05-30 21:56:39 +00:00
e315e104ae
perform system calls in a more secure manner at suggestion of Adam Spiers <adam@spiers.net>
2000-05-20 01:15:42 +00:00
8ffc70363b
Added DisconnectFromDatabase() routine.
2000-02-07 23:46:07 +00:00
18f71469a1
updated license boilerplate
1999-11-01 23:33:56 +00:00
3afdb5a0ca
Update version to 1.3 (which means unstable, tip-of-CVS version).
1999-10-26 15:49:58 +00:00
00716ade51
Make version number be 1.2, we will be spinning a tarball.
1999-10-26 15:37:12 +00:00
5ba179a29e
newer alphas of MySQL won't let use "when" as a column name, so let's change
...
our usage while it's still easy to do so.
1999-10-12 18:05:42 +00:00
a2b98618af
Patch by Ian Wells <I.Wells@tarragon-et.co.uk> -- disable JavaScript
...
magic on IE (where it wasn't working), other minor cleanups.
1999-09-17 15:47:03 +00:00
ec5e748d3b
Fix some Y2K issues! Now, don't freak out. The only real bug was
...
that lists of checkins would have started displaying the year as "100"
in the year 2000. I have changed to display 4-digit years throughout.
1999-08-05 22:49:38 +00:00
0b7eef9f73
Fixed bug 10812 -- LXR paths were not getting generated correctly.
1999-07-30 01:28:32 +00:00
8f618963db
Munge usernames containing "%" into an "@" when determining email address.
1999-07-23 22:12:29 +00:00
258ccf5f6d
Let me tweak the parameters to DBI->connect().
1999-07-23 19:14:37 +00:00
d1360d1cc4
Massive patch (mostly from Dieter Weber <dieter@Compatible.COM>) -- ported all TCL code to Perl.
1999-07-23 18:39:31 +00:00
cls%seawood.org
timeless%mozdev.org
tara%tequilarista.org
justdave%syndicomm.com
myk%mozilla.org
cyeh%bluemartini.com
endico%mozilla.org
terry%mozilla.org
dmose%mozilla.org