happy bmo push day!

[Byron Jones]

the following changes have been pushed to bugzilla.mozilla.org:

https://bugzil.la/1233878 : tracking flags don't show up in the view of
the bug right after filing
https://bugzil.la/1224001 : Add push connector for Aha.io
https://bugzil.la/1237188 : add support for servicenow to the 'see also'
field
https://bugzil.la/1236955 : [form.mdn] Please add component drop-down to
custom form
https://bugzil.la/1232913 : The attachment links don't look like links
https://bugzil.la/1237185 : hide 'cab review' custom field behind a
"click through" to direct people to servicenow

--
byron jones - :glob - bugzilla.mozilla.org team lead -

[dlaw...@mozilla.com]

the following changes have been pushed to bugzilla.mozilla.org:

https://bugzil.la/1238573 : Change label of "New Bug" menu to "New/Clone Bug"
https://bugzil.la/1239065 : Project Kickoff Form: Adjustments needed to Mozilla Infosec review portion
https://bugzil.la/1240157 : Fix a typo in bug.rst
https://bugzil.la/1236461 : Mass update mozilla-reps group

[Byron Jones]

the following changes have been pushed to bugzilla.mozilla.org:

https://bugzil.la/1236161 : when converting a BMP attachment to PNG
fails a zero byte attachment is created
https://bugzil.la/1231918 : error handler doesn't close multi-part responses

[dlaw...@mozilla.com]

the following changes have been pushed to bugzilla.mozilla.org:

https://bugzil.la/1240575 : Update form.reps.budget
https://bugzil.la/1226028 : API for batching MozReview requests

[Byron Jones]

the following changes have been pushed to bugzilla.mozilla.org:

https://bugzil.la/1243246 : Attachment data submitted via REST API must
always be base64 encoded
https://bugzil.la/1213424 : The Bugzilla autocomplete dropdown should
expand the width to show the full text of a match
https://bugzil.la/1241667 : Trying to report a bug traps the user in an
infinite loop
https://bugzil.la/1188236 : "Congratulations on having your first patch
approved" email should be clearer about how to get the patch landed.
https://bugzil.la/1243051 : Create one off script to output cpanfile
with all modules and their current versions to be used for version pinning
https://bugzil.la/1244604 : configure nagios alerting for the
bmo/reviewboard connector
https://bugzil.la/1244996 : add a script to manage a user's settings

[dlaw...@mozilla.com]

the following changes have been pushed to bugzilla.mozilla.org:

https://bugzil.la/1245003 : increase the apache sizelimit used by the taskcluster image
https://bugzil.la/1246864 : Unable to comment tickets with "WONTFIX" status without change the status on the experimental UI

[dlaw...@mozilla.com]

the following changes have been pushed to bugzilla.mozilla.org:

https://bugzil.la/1246413 : Email::Address caches all email addresses
https://bugzil.la/1235182 : User Story should always be visible
https://bugzil.la/1244602 : rewrite the bmo --> reviewboard connector to create a bug instead of updating reviewboard

[Dylan Hardison]

the following changes have been pushed to bugzilla.mozilla.org:

https://bugzil.la/1245471 : Release Tracking Report should be able to have
custom dates
https://bugzil.la/1249614 : Release Tracking Report missed bug

[Dylan Hardison]

the following changes have been pushed to bugzilla.mozilla.org:

https://bugzil.la/1251047 : /rest/bug/field takes 15-25 seconds to return
https://bugzil.la/1252219 : Attachment bounty form is vulnerable to CSRF
and persistent XSS
https://bugzil.la/1252216 : Push extension configuration is vulnerable to
CSRF
https://bugzil.la/1252210 : AntiSpam configuration is vulnerable to CSRF
and persistent XSS
https://bugzil.la/1252437 : XSS vulnerability through malicious bug aliases

[dlaw...@mozilla.com]

the following changes have been pushed to bugzilla.mozilla.org:

https://bugzil.la/1252628 : 404 on https://www.mozilla.org/en-US/quality/bug-writing-guidelines.html
https://bugzil.la/1253032 : Recent change to JSON::XS breaks some APIs
https://bugzil.la/1252735 : test_email_preferences.t selenium test is intermittently failing
https://bugzil.la/1252862 : Remove calls to delete_token() in several places where it is unnecessary
https://bugzil.la/1252084 : Warning when entering row into user_request_log when running commandline script
https://bugzil.la/1253691 : issue-api-key.pl needs to take an app_id as well
https://bugzil.la/1251442 : Update VP list in Recruiting Product
https://bugzil.la/1252445 : Tracking flags configuration is vulnerable to CSRF and causes persistent XSS
https://bugzil.la/1252554 : Avoid possibility of XSS in release tracking report

[dlaw...@mozilla.com]

the following changes have been pushed to bugzilla.mozilla.org:

https://bugzil.la/1253483 : MozReview.attachments() doesn't create flags on new attachments
https://bugzil.la/1254542 : Reflected XSS in comment-remo-form-payment.txt page
https://bugzil.la/1254675 : bug_modal template fails to escape format parameter
https://bugzil.la/1254227 : MozReview auth delegation allows sending out phishing mails via Bugzilla
https://bugzil.la/1253914 : Cross domain referer leakage when resetting the user password
https://bugzil.la/1252578 : CSRF and SELECT-only SQL execution attack against query_database.html

Thanks!

[dlaw...@mozilla.com]

he following changes have been pushed to bugzilla.mozilla.org:

https://bugzil.la/1255272 : Adding a flag via the MozReview batch-attachment API doesn't CC the user
https://bugzil.la/1229834 : extend information we [audit] log to the syslog

[dlaw...@mozilla.com]

the following changes have been pushed to bugzilla.mozilla.org:

https://bugzil.la/1251442 : Update VP list in Recruiting Product

https://bugzil.la/1256954 : Multiple Selenium cases are failing after the commit of bug 1253914
https://bugzil.la/1252782 : can't add a "See Also" to a Chromium bug on bugs.chromium.org
https://bugzil.la/1258547 : XSS through javascript: callback URLs in auth delegation

[dlaw...@mozilla.com]

the following changes have been pushed to bugzilla.mozilla.org:

https://bugzil.la/1251236 : Please show the diff on the attachment details page when a patch has been reviewed in MozReview
https://bugzil.la/1259266 : Private attachments when viewing a bug are indistinguishable from any other attachment.
https://bugzil.la/1253718 : CRM/Email request form

[dlaw...@mozilla.com]

the following changes have been pushed to bugzilla.mozilla.org:

https://bugzil.la/1260545 : Legal compliance / adding terms link to new BMO account flow
https://bugzil.la/1197061 : don't create a new session for every authenticated XMLRPC/JSONRPC call
https://bugzil.la/1257662 : Disallow clearing a flag if the flag is set to allow granting by specifc group and changer is not in group
https://bugzil.la/1259322 : Legal compliance / adding link to footer