Bug 1072490: Release notes for 4.4.6
r=LpSolit,a=sgreen
Bug 1075578: [SECURITY] Improper filtering of CGI arguments
r=dkl,a=sgreen
Bug 1074980: Forbid the { foo => $cgi->param() } syntax to prevent data override
r=dkl,a=sgreen
Bug 1064140: [SECURITY] Private comments can be shown to flagmail recipients who aren't in the insider group
r=glob,a=glob
Bug 1054702: CSV export vulnerable to formulae injection
r=glob,a=glob
Bump version to 4.4.6
Bump version post-release
attachment status
test extension
attachment status
attachment status
attachment status
attachment status
attachment status
attachment status
attachment status
attachment status
attachment status
attachment status
attachment status