diff options
| author | David Lawrence <dkl@mozilla.com> | 2015-01-21 21:37:49 +0100 |
|---|---|---|
| committer | David Lawrence <dkl@mozilla.com> | 2015-01-21 21:37:49 +0100 |
| commit | 16122921b2f68b490a61cd80ae9ea5ee661ae11b (patch) | |
| tree | a92202fcfc92df21b3e8218926203042aecaf918 /Bugzilla/WebService/Bug.pm | |
| parent | 4dabf1a9c679f06b3637d3c76e1e05aa83a6d259 (diff) | |
| download | bugzilla-16122921b2f68b490a61cd80ae9ea5ee661ae11b.tar.gz bugzilla-16122921b2f68b490a61cd80ae9ea5ee661ae11b.tar.xz | |
Bug 1090275: WebServices modules should maintain a whitelist of methods that are allowed instead of allowing access to any function imported into its namespace
r=dylan,a=glob
Diffstat (limited to 'Bugzilla/WebService/Bug.pm')
| -rw-r--r-- | Bugzilla/WebService/Bug.pm | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/Bugzilla/WebService/Bug.pm b/Bugzilla/WebService/Bug.pm index 3d7ff3804..c6217eac1 100644 --- a/Bugzilla/WebService/Bug.pm +++ b/Bugzilla/WebService/Bug.pm @@ -62,6 +62,27 @@ use constant READ_ONLY => qw( search ); +use constant PUBLIC_METHODS => qw( + add_attachment + add_comment + attachments + comments + create + fields + get + history + legal_values + possible_duplicates + render_comment + search + search_comment_tags + update + update_attachment + update_comment_tags + update_see_also + update_tags +); + use constant ATTACHMENT_MAPPED_SETTERS => { file_name => 'filename', summary => 'description', |