diff options
| author | Simon Green <sgreen@redhat.com> | 2013-02-19 18:11:40 +0100 |
|---|---|---|
| committer | Frédéric Buclin <LpSolit@gmail.com> | 2013-02-19 18:11:40 +0100 |
| commit | e2c8da0dfc534ffca6232cc7d370299d5d446604 (patch) | |
| tree | 94031fcc7203f315398ddb7d3055908769e99294 /Bugzilla/Config/GroupSecurity.pm | |
| parent | fab1e128fd61a78809ee967279e8acc6b6962f1e (diff) | |
| download | bugzilla-e2c8da0dfc534ffca6232cc7d370299d5d446604.tar.gz bugzilla-e2c8da0dfc534ffca6232cc7d370299d5d446604.tar.xz | |
Bug 824399: (CVE-2013-0786) [SECURITY] build_subselect() leaks the existence of products and components you cannot access
r/a=LpSolit
Diffstat (limited to 'Bugzilla/Config/GroupSecurity.pm')
| -rw-r--r-- | Bugzilla/Config/GroupSecurity.pm | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/Bugzilla/Config/GroupSecurity.pm b/Bugzilla/Config/GroupSecurity.pm index d5f02f42d..d57573de3 100644 --- a/Bugzilla/Config/GroupSecurity.pm +++ b/Bugzilla/Config/GroupSecurity.pm @@ -58,6 +58,14 @@ sub get_param_list { }, { + name => 'debug_group', + type => 's', + choices => \&_get_all_group_names, + default => 'admin', + checker => \&check_group + }, + + { name => 'usevisibilitygroups', type => 'b', default => 0 |