diff options
| author | justdave%bugzilla.org <> | 2004-10-25 16:33:20 +0200 |
|---|---|---|
| committer | justdave%bugzilla.org <> | 2004-10-25 16:33:20 +0200 |
| commit | 22628e0ab83b78056beed1663af9bf14071a97fc (patch) | |
| tree | 6878216f7509d4b630b08761ba06f186ec092594 /quips.cgi | |
| parent | 53bd4df6f142c240d7beaa6b6789839da1f5f164 (diff) | |
| download | bugzilla-22628e0ab83b78056beed1663af9bf14071a97fc.tar.gz bugzilla-22628e0ab83b78056beed1663af9bf14071a97fc.tar.xz | |
[SECURITY] Bug 253544: Changes to the metadata (filename, description, mime type, review flags) on attachments which were flagged as private get displayed to users who are not members of the group allowed to see private attachments when viewing the bug activity log. This only affects sites that use the 'insidergroup' feature.
Patch by Joel Peshkin <bugreport@peshkin.net>
r=zach,justdave, a=justdave
Diffstat (limited to 'quips.cgi')
0 files changed, 0 insertions, 0 deletions