justdave%bugzilla.org 4da516c042 [SECURITY] Bug 252638: It is possible to send a carefully crafted HTTP POST message to process_bug.cgi which will remove keywords from a bug even if you don't have permissions to edit all bug fields (the "editbugs" permission). Such changes are reported in "bug changed" email notifications, so they are easily detected and reversed if someone abuses it. ...

Patch by Myk Melez <myk@mozilla.org>
r=gerv, a=justdave


git-svn-id: svn://10.0.0.236/trunk@164336 18797224-902f-48f8-a5cc-f745e15eee43

2004-10-25 07:20:59 +00:00

buildtools

Update to nsinstall

2002-10-28 23:25:11 +00:00

CVSROOT

Pseudo-automatic update of changes made by myk@mozilla.org.

2004-10-20 13:34:29 +00:00

l10nkits/client

…

mozilla

[SECURITY] Bug 252638: It is possible to send a carefully crafted HTTP POST message to process_bug.cgi which will remove keywords from a bug even if you don't have permissions to edit all bug fields (the "editbugs" permission). Such changes are reported in "bug changed" email notifications, so they are easily detected and reversed if someone abuses it.

2004-10-25 07:20:59 +00:00

vtable_hide

vtable_hide

2003-12-03 07:50:05 +00:00

Description

No description provided

982 MiB

Languages

C++ 31%

C 21.9%

HTML 13.3%

JavaScript 12.9%

Java 5.1%

Other 15.5%