Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bug 287436: [SECURITY] After having logged in, links to change the report type contain username and password

Browse Source 
Patch By Marc Schumann <wurblzap@gmail.com> r=gerv, a=justdave


git-svn-id: svn://10.0.0.236/trunk@173308 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
mkanat%kerio.com
2005-05-12 01:54:08 +00:00
parent 5493a9645b
commit 4ffb7300db
3 changed files with 12 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
mozilla/webtools/bugzilla/userprefs.cgi
View File

@@ -388,12 +388,19 @@ sub SaveSavedSearches() {
# Live code (not subroutine definitions) starts here
###############################################################################
my $cgi = Bugzilla->cgi;
# This script needs direct access to the username and password CGI variables,
# so we save them before their removal in Bugzilla->login
my $bugzilla_login = $cgi->param('Bugzilla_login');
my $bugzilla_password = $cgi->param('Bugzilla_password');
Bugzilla->login(LOGIN_REQUIRED);
$cgi->param('Bugzilla_login', $bugzilla_login);
$cgi->param('Bugzilla_password', $bugzilla_password);
GetVersionTable();
my $cgi = Bugzilla->cgi;
$vars->{'changes_saved'} = $cgi->param('dosave');
my $current_tab_name = $cgi->param('tab') || "account";