diff options
author | Simon Green <sgreen@redhat.com> | 2013-09-04 02:41:14 +0200 |
---|---|---|
committer | Simon Green <sgreen@redhat.com> | 2013-09-04 02:41:14 +0200 |
commit | e8b8659344184e15d519fe5f499bbcc86094687f (patch) | |
tree | aff7755c5b2679f5dc18c552c77173f42574485a | |
parent | 6098f29728efd1b3de09b3f7e6df4ab289167787 (diff) | |
download | bugzilla-e8b8659344184e15d519fe5f499bbcc86094687f.tar.gz bugzilla-e8b8659344184e15d519fe5f499bbcc86094687f.tar.xz |
Bug 875217 - SecurityError in Javascript on buglist.cgi
r=glob, a=glob
-rw-r--r-- | template/en/default/list/list.html.tmpl | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/template/en/default/list/list.html.tmpl b/template/en/default/list/list.html.tmpl index 6e1755fed..ec453d0b7 100644 --- a/template/en/default/list/list.html.tmpl +++ b/template/en/default/list/list.html.tmpl @@ -30,22 +30,22 @@ [% qorder = order FILTER uri IF order %] [% javascript = BLOCK %] - [% new_url = cgi.self_url %] [% IF quicksearch %] - [% new_url = BLOCK ~%] - buglist.cgi?quicksearch=[% quicksearch FILTER uri %] + [% new_param = BLOCK ~%] + quicksearch=[% quicksearch FILTER uri %] [%~ IF cgi.param('list_id') ~%] &list_id=[% cgi.param('list_id') FILTER uri %] [%~ END %] [% END %] [% ELSIF cgi.param('token') != '' %] - [% new_url = 'buglist.cgi?' - _ cgi.canonicalise_query('token', 'cmdtype', 'remtype') %] + [% new_param = cgi.canonicalise_query('token', 'cmdtype', 'remtype') %] + [% ELSE %] + [% new_param = cgi.canonicalise_query %] [% END %] if (history && history.replaceState) { history.replaceState(null, "[% unfiltered_title FILTER js %]", - "[% new_url FILTER js %]"); + "buglist.cgi?[% new_param FILTER js %]"); document.title = "[% unfiltered_title FILTER js %]"; } [% javascript FILTER none %] |