summaryrefslogtreecommitdiffstats
path: root/Bugzilla/Config
diff options
context:
space:
mode:
authorlpsolit%gmail.com <>2009-02-02 20:10:32 +0100
committerlpsolit%gmail.com <>2009-02-02 20:10:32 +0100
commit9c49307f5c2f5a67ab5b3b1270cc83b30efa8637 (patch)
tree4b499585721720596570442514b89eb8c41ed7e3 /Bugzilla/Config
parentd382992164347e076c51d3116a32aeabb2beecd5 (diff)
downloadbugzilla-9c49307f5c2f5a67ab5b3b1270cc83b30efa8637.tar.gz
bugzilla-9c49307f5c2f5a67ab5b3b1270cc83b30efa8637.tar.xz
Bug 472206: [SECURITY] Bugzilla should optionally not allow the user to view possibly harmful attachments - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat r=justdave a=LpSolit
Diffstat (limited to 'Bugzilla/Config')
-rw-r--r--Bugzilla/Config/Attachment.pm8
1 files changed, 7 insertions, 1 deletions
diff --git a/Bugzilla/Config/Attachment.pm b/Bugzilla/Config/Attachment.pm
index 17dbe4068..2b014deda 100644
--- a/Bugzilla/Config/Attachment.pm
+++ b/Bugzilla/Config/Attachment.pm
@@ -40,7 +40,13 @@ $Bugzilla::Config::Attachment::sortkey = "025";
sub get_param_list {
my $class = shift;
my @param_list = (
- {
+ {
+ name => 'allow_attachment_display',
+ type => 'b',
+ default => 0
+ },
+
+ {
name => 'attachment_base',
type => 't',
default => '',