summaryrefslogtreecommitdiffstats
path: root/Bugzilla/Constants.pm
diff options
context:
space:
mode:
authorFrédéric Buclin <LpSolit@gmail.com>2010-11-03 00:06:15 +0100
committerFrédéric Buclin <LpSolit@gmail.com>2010-11-03 00:06:15 +0100
commitc793bb323f1c58c1fe3e82b09068e88c380f5c21 (patch)
treec9a3bc93501bc6b2e13f4a777a0515959ea17491 /Bugzilla/Constants.pm
parent480a9b8e789be47fe8a4ddf5159c0a4056f890cb (diff)
downloadbugzilla-c793bb323f1c58c1fe3e82b09068e88c380f5c21.tar.gz
bugzilla-c793bb323f1c58c1fe3e82b09068e88c380f5c21.tar.xz
Bug 419014: (CVE-2010-3764) [SECURITY] Old charts are not project specific, and product names are viewable in graphs/
r=wurblzap a=LpSolit
Diffstat (limited to 'Bugzilla/Constants.pm')
-rw-r--r--Bugzilla/Constants.pm1
1 files changed, 1 insertions, 0 deletions
diff --git a/Bugzilla/Constants.pm b/Bugzilla/Constants.pm
index 4ca04c478..9a0f6cd2e 100644
--- a/Bugzilla/Constants.pm
+++ b/Bugzilla/Constants.pm
@@ -623,6 +623,7 @@ sub bz_locations {
'datadir' => $datadir,
'attachdir' => "$datadir/attachments",
'skinsdir' => "$libpath/skins",
+ 'graphsdir' => "$libpath/graphs",
# $webdotdir must be in the web server's tree somewhere. Even if you use a
# local dot, we output images to there. Also, if $webdotdir is
# not relative to the bugzilla root directory, you'll need to