From mboxrd@z Thu Jan  1 00:00:00 1970
From: gerald@sourceware.cygnus.com
To: gnats-cvs@sourceware.cygnus.com
Subject: gnats/contrib/gnatsweb ChangeLog gnatsweb.pl
Date: Thu, 15 Mar 2001 14:37:00 -0000
Message-id: <20010315223709.5606.qmail@sourceware.cygnus.com>
X-SW-Source: 2001/msg00065.html
List-Id: <gnats-cvs.sourceware.org>

CVSROOT:	/cvs/gnats
Module name:	gnats
Changes by:	gerald@sources.redhat.com	2001-03-15 14:37:09

Modified files:
	contrib/gnatsweb: ChangeLog gnatsweb.pl 

Log message:
	* gnatsweb.pl (decode_attachment): Editing bugs with attached files
	used to bomb out trying to chomp a constant string.

Patches:
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/ChangeLog.diff?cvsroot=gnats&r1=2.14&r2=2.15
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/gnatsweb.pl.diff?cvsroot=gnats&r1=2.24&r2=2.25


From mboxrd@z Thu Jan  1 00:00:00 1970
From: gerald@sourceware.cygnus.com
To: gnats-cvs@sourceware.cygnus.com
Subject: gnats/contrib/gnatsweb ChangeLog gnatsweb.pl
Date: Wed, 21 Mar 2001 01:02:00 -0000
Message-id: <20010321090218.18139.qmail@sourceware.cygnus.com>
X-SW-Source: 2001/msg00069.html
List-Id: <gnats-cvs.sourceware.org>

CVSROOT:	/cvs/gnats
Module name:	gnats
Changes by:	gerald@sources.redhat.com	2001-03-21 01:02:18

Modified files:
	contrib/gnatsweb: ChangeLog gnatsweb.pl 

Log message:
	* gnatsweb.pl: New configuration variable $site_stylesheet.
	(page_start_html): Use it.

Patches:
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/ChangeLog.diff?cvsroot=gnats&r1=2.15&r2=2.16
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/gnatsweb.pl.diff?cvsroot=gnats&r1=2.25&r2=2.26


From mboxrd@z Thu Jan  1 00:00:00 1970
From: gerald@sourceware.cygnus.com
To: gnats-cvs@sourceware.cygnus.com
Subject: gnats/contrib/gnatsweb ChangeLog gnatsweb.pl
Date: Wed, 21 Mar 2001 01:09:00 -0000
Message-id: <20010321090927.20831.qmail@sourceware.cygnus.com>
X-SW-Source: 2001/msg00070.html
List-Id: <gnats-cvs.sourceware.org>

CVSROOT:	/cvs/gnats
Module name:	gnats
Changes by:	gerald@sources.redhat.com	2001-03-21 01:09:27

Modified files:
	contrib/gnatsweb: ChangeLog gnatsweb.pl 

Log message:
	* gnatsweb.pl ($VERSION): Bump to 3.95.

Patches:
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/ChangeLog.diff?cvsroot=gnats&r1=2.16&r2=2.17
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/gnatsweb.pl.diff?cvsroot=gnats&r1=2.26&r2=2.27


From mboxrd@z Thu Jan  1 00:00:00 1970
From: yngves@sourceware.cygnus.com
To: gnats-cvs@sourceware.cygnus.com
Subject: gnats/contrib/gnatsweb ChangeLog gnatsweb.pl
Date: Thu, 22 Mar 2001 12:28:00 -0000
Message-id: <20010322202837.29473.qmail@sourceware.cygnus.com>
X-SW-Source: 2001/msg00071.html
List-Id: <gnats-cvs.sourceware.org>

CVSROOT:	/cvs/gnats
Module name:	gnats
Changes by:	yngves@sources.redhat.com	2001-03-22 12:28:37

Modified files:
	contrib/gnatsweb: ChangeLog gnatsweb.pl 

Log message:
	gnatsweb.pl (display_query_results): Apply escapeHTML to
	$fieldcontents before printing.

Patches:
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/ChangeLog.diff?cvsroot=gnats&r1=2.17&r2=2.18
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/gnatsweb.pl.diff?cvsroot=gnats&r1=2.27&r2=2.28


From mboxrd@z Thu Jan  1 00:00:00 1970
From: gerald@sourceware.cygnus.com
To: gnats-cvs@sourceware.cygnus.com
Subject: gnats/contrib/gnatsweb ChangeLog gnatsweb.pl
Date: Sat, 24 Mar 2001 01:14:00 -0000
Message-id: <20010324091452.15836.qmail@sourceware.cygnus.com>
X-SW-Source: 2001/msg00072.html
List-Id: <gnats-cvs.sourceware.org>

CVSROOT:	/cvs/gnats
Module name:	gnats
Changes by:	gerald@sources.redhat.com	2001-03-24 01:14:52

Modified files:
	contrib/gnatsweb: ChangeLog gnatsweb.pl 

Log message:
	* gnatsweb.pl (login_page_javascript): Use correct <SCRIPT LANGUAGE>.
	Fix the Javascript code and improve the warning messages if cookies
	are not enabled.

Patches:
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/ChangeLog.diff?cvsroot=gnats&r1=2.18&r2=2.19
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/gnatsweb.pl.diff?cvsroot=gnats&r1=2.28&r2=2.29


From mboxrd@z Thu Jan  1 00:00:00 1970
From: yngves@sourceware.cygnus.com
To: gnats-cvs@sourceware.cygnus.com
Subject: gnats/contrib/gnatsweb ChangeLog gnatsweb.pl
Date: Wed, 28 Mar 2001 15:35:00 -0000
Message-id: <20010328233540.22438.qmail@sourceware.cygnus.com>
X-SW-Source: 2001/msg00073.html
List-Id: <gnats-cvs.sourceware.org>

CVSROOT:	/cvs/gnats
Module name:	gnats
Changes by:	yngves@sources.redhat.com	2001-03-28 15:35:39

Modified files:
	contrib/gnatsweb: ChangeLog gnatsweb.pl 

Log message:
	* gnatsweb.pl (display_query_results): Add an if clause in order to
	print an &nbsp; if a field is empty. This is needed because most
	browsers won't render the border of an empty field.
	
	* gnatsweb.pl: Make output more amenable to CSS stylesheet formatting.
	Add paragraph tags and enclose stuff that doesn't belong inside
	paragraphs in DIV tags. Use heading tags instead of font size tags for
	headings. Also correct some rather bad HTML problems with missing
	endtags for paragraph and table tags all over the place. These caused
	Netscape Navigator to refuse to use stylesheet styling in query results
	table cells. This should also improve browser rendering performance.
	Improved HTML source code formatting by adding lots of \n's
	
	* gnatsweb.pl (main_page): Remove Matt's and Kenneth's e-mail
	addresses. They do not seem to be valid anymore.
	
	* gnatsweb.pl (main_page): Collect the two query buttons on one
	line in order to conserve vertical space.

Patches:
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/ChangeLog.diff?cvsroot=gnats&r1=2.19&r2=2.20
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/gnatsweb.pl.diff?cvsroot=gnats&r1=2.29&r2=2.30


From mboxrd@z Thu Jan  1 00:00:00 1970
From: yngves@sourceware.cygnus.com
To: gnats-cvs@sourceware.cygnus.com
Subject: gnats/contrib/gnatsweb ChangeLog gnatsweb.pl
Date: Wed, 04 Apr 2001 15:16:00 -0000
Message-id: <20010404221629.27192.qmail@sourceware.cygnus.com>
X-SW-Source: 2001/msg00074.html
List-Id: <gnats-cvs.sourceware.org>

CVSROOT:	/cvs/gnats
Module name:	gnats
Changes by:	yngves@sources.redhat.com	2001-04-04 15:16:29

Modified files:
	contrib/gnatsweb: ChangeLog gnatsweb.pl 

Log message:
	* gnatsweb.pl (display_query_results): Use the provided 'nonempty'
	routine to pad empty cells with &nbsp;'s instead of the if used in
	the last checkin. This only takes care of the cases where the empty
	cells are not at the end of a row.
	
	* gnatsweb.pl (display_query_results): When there are one or more
	empty cells at the end of a query result row, the remaining cells
	are padded with &nbsp;'s.

Patches:
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/ChangeLog.diff?cvsroot=gnats&r1=2.20&r2=2.21
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/gnatsweb.pl.diff?cvsroot=gnats&r1=2.30&r2=2.31


From mboxrd@z Thu Jan  1 00:00:00 1970
From: yngves@sourceware.cygnus.com
To: gnats-cvs@sourceware.cygnus.com
Subject: gnats/contrib/gnatsweb ChangeLog gnatsweb.pl
Date: Wed, 04 Apr 2001 17:37:00 -0000
Message-id: <20010405003705.28730.qmail@sourceware.cygnus.com>
X-SW-Source: 2001/msg00076.html
List-Id: <gnats-cvs.sourceware.org>

CVSROOT:	/cvs/gnats
Module name:	gnats
Changes by:	yngves@sources.redhat.com	2001-04-04 17:37:04

Modified files:
	contrib/gnatsweb: ChangeLog gnatsweb.pl 

Log message:
	* gnatsweb.pl (query_page): Shift 'number' out of the array of
	selectable column names (@fieldnames) to prevent user from
	selecting it. That would cause the 'number' column to be
	repeated twice, since NUMBER_FIELD is explicitly added to the
	search format in submitquery. The best solution would be to
	remove the explicit addition, but that messes up column sorting.
	However, since the only drawback of the current fix is that we
	force the inclusion of PR numbers in the query results listing,
	this doesn't seem to matter much.

Patches:
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/ChangeLog.diff?cvsroot=gnats&r1=2.22&r2=2.23
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/gnatsweb.pl.diff?cvsroot=gnats&r1=2.32&r2=2.33


From mboxrd@z Thu Jan  1 00:00:00 1970
From: yngves@sourceware.cygnus.com
To: gnats-cvs@sourceware.cygnus.com
Subject: gnats/contrib/gnatsweb ChangeLog gnatsweb.pl
Date: Tue, 26 Jun 2001 12:13:00 -0000
Message-id: <20010626191331.26139.qmail@sourceware.cygnus.com>
X-SW-Source: 2001/msg00165.html
List-Id: <gnats-cvs.sourceware.org>

CVSROOT:	/cvs/gnats
Module name:	gnats
Changes by:	yngves@sources.redhat.com	2001-06-26 12:13:31

Modified files:
	contrib/gnatsweb: ChangeLog gnatsweb.pl 

Log message:
	(help_page): Fix a serious security hole where an attacker would be
	able to read any file on the system or run any command to which the
	web server process user had access to by submitting a rogue help_file
	parameter in the URL.  help_file is now hardcoded to 'gnatsweb.html'.

Patches:
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/ChangeLog.diff?cvsroot=gnats&r1=2.23&r2=2.24
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/gnatsweb.pl.diff?cvsroot=gnats&r1=2.33&r2=2.34


From mboxrd@z Thu Jan  1 00:00:00 1970
From: yngves@sourceware.cygnus.com
To: gnats-cvs@sourceware.cygnus.com
Subject: gnats/contrib/gnatsweb ChangeLog gnatsweb.pl
Date: Sat, 20 Oct 2001 02:27:00 -0000
Message-id: <20011020092724.2429.qmail@sourceware.cygnus.com>
X-SW-Source: 2001/msg00290.html
List-Id: <gnats-cvs.sourceware.org>

CVSROOT:	/cvs/gnats
Module name:	gnats
Changes by:	yngves@sources.redhat.com	2001-10-20 02:27:23

Modified files:
	contrib/gnatsweb: ChangeLog gnatsweb.pl 

Log message:
	* gnatsweb.pl (get_viewpr_url): Properly escape the 'view
	audit-trail' command.

Patches:
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/ChangeLog.diff?cvsroot=gnats&r1=2.27&r2=2.28
http://sources.redhat.com/cgi-bin/cvsweb.cgi/gnats/contrib/gnatsweb/gnatsweb.pl.diff?cvsroot=gnats&r1=2.38&r2=2.39