Bug 235510: Do not expose user password in URL to chart image if login required to access a chart

patch by gerv
r=kiko
a=justdave

1 files changed, 2 insertions, 1 deletions

diff --git a/chart.cgi b/chart.cgi
index b6f7f746b..d3f6f5ccc 100755
--- a/chart.cgi
+++ b/chart.cgi
@@ -284,7 +284,8 @@ sub wrap {
     $vars->{'time'} = time();
 
     $vars->{'imagebase'} = $cgi->canonicalise_query(
-                "action", "action-wrap", "ctype", "format", "width", "height");
+                "action", "action-wrap", "ctype", "format", "width", "height",
+                "Bugzilla_login", "Bugzilla_password");
 
     print "Content-Type:text/html\n\n";
     $template->process("reports/chart.html.tmpl", $vars)