justdave%bugzilla.org bca966aff7 [SECURITY] Bug 263780: Exporting a bug to XML exposes user comments and attachment summaries which are marked as private to users who are not members of the group allowed to see private comments and attachments. XML export is not exposed in the user interface, but is available to anyone who knows the correct URL to invoke it. This only affects sites that use the 'insidergroup' feature. ...

Patch by Joel Peshkin <bugreport@peshkin.net>
r=vladd,justdave, a=justdave


git-svn-id: svn://10.0.0.236/trunk@164337 18797224-902f-48f8-a5cc-f745e15eee43

2004-10-25 07:26:57 +00:00

..

en/default

[SECURITY] Bug 263780: Exporting a bug to XML exposes user comments and attachment summaries which are marked as private to users who are not members of the group allowed to see private comments and attachments. XML export is not exposed in the user interface, but is available to anyone who knows the correct URL to invoke it. This only affects sites that use the 'insidergroup' feature.

2004-10-25 07:26:57 +00:00