diff options
| author | Frédéric Buclin <LpSolit@gmail.com> | 2010-11-03 00:06:15 +0100 |
|---|---|---|
| committer | Frédéric Buclin <LpSolit@gmail.com> | 2010-11-03 00:06:15 +0100 |
| commit | c793bb323f1c58c1fe3e82b09068e88c380f5c21 (patch) | |
| tree | c9a3bc93501bc6b2e13f4a777a0515959ea17491 /template | |
| parent | 480a9b8e789be47fe8a4ddf5159c0a4056f890cb (diff) | |
| download | bugzilla-c793bb323f1c58c1fe3e82b09068e88c380f5c21.tar.gz bugzilla-c793bb323f1c58c1fe3e82b09068e88c380f5c21.tar.xz | |
Bug 419014: (CVE-2010-3764) [SECURITY] Old charts are not project specific, and product names are viewable in graphs/
r=wurblzap a=LpSolit
Diffstat (limited to 'template')
| -rw-r--r-- | template/en/default/global/user-error.html.tmpl | 2 | ||||
| -rw-r--r-- | template/en/default/reports/old-charts.html.tmpl | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/template/en/default/global/user-error.html.tmpl b/template/en/default/global/user-error.html.tmpl index a734435a1..5aa8955fd 100644 --- a/template/en/default/global/user-error.html.tmpl +++ b/template/en/default/global/user-error.html.tmpl @@ -907,7 +907,7 @@ [% ELSIF error == "invalid_datasets" %] [% title = "Invalid Datasets" %] - Invalid datasets <em>[% datasets FILTER html %]</em>. Only digits, + Invalid datasets <em>[% datasets.join(":") FILTER html %]</em>. Only digits, letters and colons are allowed. [% ELSIF error == "invalid_format" %] diff --git a/template/en/default/reports/old-charts.html.tmpl b/template/en/default/reports/old-charts.html.tmpl index ca3ba6c7d..4bdc0cffa 100644 --- a/template/en/default/reports/old-charts.html.tmpl +++ b/template/en/default/reports/old-charts.html.tmpl @@ -51,7 +51,7 @@ [%# We cannot use translated statuses and resolutions from field-descs.none.html # because old charts do not distinguish statuses from resolutions. %] [% FOREACH dataset = datasets %] - <option value="[% dataset.value FILTER html %]:" + <option value="[% dataset.value FILTER html %]" [% " selected=\"selected\"" IF dataset.selected %]> [% dataset.value FILTER html %]</option> [% END %] |