diff options
author | David Lawrence <dkl@mozilla.com> | 2015-01-21 21:37:49 +0100 |
---|---|---|
committer | David Lawrence <dkl@mozilla.com> | 2015-01-21 21:37:49 +0100 |
commit | 16122921b2f68b490a61cd80ae9ea5ee661ae11b (patch) | |
tree | a92202fcfc92df21b3e8218926203042aecaf918 /Bugzilla/WebService/Product.pm | |
parent | 4dabf1a9c679f06b3637d3c76e1e05aa83a6d259 (diff) | |
download | bugzilla-16122921b2f68b490a61cd80ae9ea5ee661ae11b.tar.gz bugzilla-16122921b2f68b490a61cd80ae9ea5ee661ae11b.tar.xz |
Bug 1090275: WebServices modules should maintain a whitelist of methods that are allowed instead of allowing access to any function imported into its namespace
r=dylan,a=glob
Diffstat (limited to 'Bugzilla/WebService/Product.pm')
-rw-r--r-- | Bugzilla/WebService/Product.pm | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/Bugzilla/WebService/Product.pm b/Bugzilla/WebService/Product.pm index 6330b6402..7a3b0fa3e 100644 --- a/Bugzilla/WebService/Product.pm +++ b/Bugzilla/WebService/Product.pm @@ -26,6 +26,15 @@ use constant READ_ONLY => qw( get_selectable_products ); +use constant PUBLIC_METHODS => qw( + create + get + get_accessible_products + get_enterable_products + get_selectable_products + update +); + use constant MAPPED_FIELDS => { has_unconfirmed => 'allows_unconfirmed', is_open => 'is_active', |