Bug 786310: Remove tokens when saving the default query

r= LpSolit, a=LpSolit

1 files changed, 2 insertions, 0 deletions

diff --git a/buglist.cgi b/buglist.cgi
index d8da0a6bb..8185491d9 100755
--- a/buglist.cgi
+++ b/buglist.cgi
@@ -435,6 +435,8 @@ elsif (($cmdtype eq "doit") && defined $cgi->param('remtype')) {
         $user = Bugzilla->login(LOGIN_REQUIRED);
         my $token = $cgi->param('token');
         check_hash_token($token, ['searchknob']);
+        $buffer = $params->canonicalise_query('cmdtype', 'remtype',
+                                              'query_based_on', 'token');
         InsertNamedQuery(DEFAULT_QUERY_NAME, $buffer);
         $vars->{'message'} = "buglist_new_default_query";
     }