justdave%syndicomm.com 8320024dd1 SECURITY FIX for bug 109679: It was possible to send arbitrary SQL to buglist.cgi by altering the HTML form before submitting.
Patch by Dave Miller <justdave@syndicomm.com>
r= dkl, gerv


git-svn-id: svn://10.0.0.236/trunk@111175 18797224-902f-48f8-a5cc-f745e15eee43
2001-12-30 05:46:24 +00:00
..
2001-11-20 20:16:24 +00:00

* This README is no longer used to house installation instructions.  Instead,
it contains pointers to where you may find the information you need.

* Installation instructions are now found in docs/, with a variety of document
types available.  Please refer to these documents when installing, configuring,
and maintaining your Bugzilla installation.  A helpful starting point is
docs/txt/Bugzilla-Guide.txt, or with a web browser at docs/html/index.html.

* Release notes for people upgrading to a new version of Bugzilla are
available at docs/rel_notes.txt.

* If you wish to contribute to the documentation, please read docs/README.docs.

* The Bugzilla web site is at "http://www.mozilla.org/projects/bugzilla/".
This site will contain the latest Bugzilla information, including how to
report bugs and how to get help with Bugzilla.