Rough Changelog for SeaMonkey 1.1.13

This is a list of bugs pulled from Bugzilla. It's a "rough" list because I didn't verify each bug on the list as actually having been fixed in the 1.1.13 development cycle and I may have missed some that were; I just used the smartest Bugzilla queries I could devise. It's not perfect but if you're interested in what got fixed since SeaMonkey 1.1.12 this is probably the best place to start. -Robert

89419 Caching of images loaded from a 302 is broken
141606 tags applied (IMAP) when offline not available after going online
316859 undefined symbol in components/libhtmlpars.so
352604 "Assertion failure: !OBJ_GET_PROTO(cx, ctor)" after deleting Function
353011 bookmark tooltips appear behind bookmarks menu
355126 stealing pictures via canvas and http redirect
355567 Firefox stores corrupted version of cached JavaScript file (merges two files together)
376777 data for "text/uri-list" flavor set in nsIClipboardDragDropHooks::OnCopyOrDrag() is overridden in nsDragService::SourceDataGet()
390219 Trunk topcrash [@ nsXMLHttpRequest::OnStartRequest]
407733 [1.8 branch] js-1.7.0.tar.gz does not build on WIN32
416284 Detached attachments should not be able to be re-detached
424733 [FIX]CSS -moz-binding property bypasses security checks on codebase principals
436741 "Assertion failure: OBJ_IS_NATIVE(obj)" with __proto__ mangling
443299 Investigate possible buffer overflow in nsDirIndexParser
450359 nsFileSpec::Truncate() expects PRInt32 as the first argument so mail may disappear.
450864 c++ style comment in parser/expat/lib/moz_extensions.c
450909 missing support for AIX target in configure.in
450991 Number in "Order Received" column becomes negative, when mail's offset in local mail folder file exceeds 2GB
451139 The return value of read() function should check in nsRandomAccessInputStream::readline instead of invoking failed().
451506 The return values of PR_Seek64 and PR_Available64 should be checked in  FileImpl::Seek or else file corruption will occur
452295 segfault: echo 'eval("1")' | ./js
453254 nsZipReaderCache::GetZip doesn't null-check the zipFile argument
453915 XML injection possible in E4X parsing via "default xml namespace"
454113 e4x/extensions/regress-374025.js - invalid write
455311 [FIX]mid-autumn festival vulnerability
455987 integer overflow in nsEscape
456896 [FIX]Crash [@ nsFrameManager::GetPrimaryFrameFor] with invalid input type (zdi-can-390)
457093 toString on js function w/ try catch silently hangs js execution
457411 [1.8 branch] Crash while uploading files to MediaFire.com [@ nsXMLHttpRequest::ConvertBodyToText]
457788 eval(string) crashes in js_ComputeFilename
458883 Make Document.documentURI and .textContent noAccess in mailnews
460002 It's possible to circumvent the inner window check in nsXMLHttpRequest::NotifyEventListeners()
462344 Update SeaMonkey version number on GECKO181_20081030_RELBRANCH