aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorlpsolit%gmail.com <>2006-10-15 04:44:05 +0000
committerlpsolit%gmail.com <>2006-10-15 04:44:05 +0000
commit6fcfcb93eda16108f71b4c96010bae95cde622cd (patch)
tree330f34de1cf473325a7f1ce996099579bbfe7a90 /show_bug.cgi
parentBug 355728: [SECURITY] XSS in the "id" parameter of showdependencygraph.cgi w... (diff)
downloadbugzilla-6fcfcb93eda16108f71b4c96010bae95cde622cd.tar.gz
bugzilla-6fcfcb93eda16108f71b4c96010bae95cde622cd.tar.bz2
bugzilla-6fcfcb93eda16108f71b4c96010bae95cde622cd.zip
Bug 346564: [SECURITY] timetracking deadline leaks in XML - Patch by Olav Vitters <bugzilla-mozilla@bkor.dhs.org> r=LpSolit a=justdave
Diffstat (limited to 'show_bug.cgi')
-rwxr-xr-xshow_bug.cgi2
1 files changed, 1 insertions, 1 deletions
diff --git a/show_bug.cgi b/show_bug.cgi
index 06a7b6425..37d31efe0 100755
--- a/show_bug.cgi
+++ b/show_bug.cgi
@@ -120,7 +120,7 @@ if ($cgi->param("field")) {
}
unless (Bugzilla->user->in_group(Bugzilla->params->{"timetrackinggroup"})) {
- @fieldlist = grep($_ !~ /_time$/, @fieldlist);
+ @fieldlist = grep($_ !~ /(^deadline|_time)$/, @fieldlist);
}
foreach (@fieldlist) {