From e2c8da0dfc534ffca6232cc7d370299d5d446604 Mon Sep 17 00:00:00 2001 From: Simon Green Date: Tue, 19 Feb 2013 18:11:40 +0100 Subject: Bug 824399: (CVE-2013-0786) [SECURITY] build_subselect() leaks the existence of products and components you cannot access r/a=LpSolit --- Bugzilla/Config/GroupSecurity.pm | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'Bugzilla/Config/GroupSecurity.pm') diff --git a/Bugzilla/Config/GroupSecurity.pm b/Bugzilla/Config/GroupSecurity.pm index d5f02f42d..d57573de3 100644 --- a/Bugzilla/Config/GroupSecurity.pm +++ b/Bugzilla/Config/GroupSecurity.pm @@ -57,6 +57,14 @@ sub get_param_list { checker => \&check_group }, + { + name => 'debug_group', + type => 's', + choices => \&_get_all_group_names, + default => 'admin', + checker => \&check_group + }, + { name => 'usevisibilitygroups', type => 'b', -- cgit v1.2.3-24-g4f1b