From d8b02aff4ed586f38a56caaafcb0374edc16d519 Mon Sep 17 00:00:00 2001
From: "reed%reedloden.com" <>
Date: Sat, 23 Aug 2008 04:38:55 +0000
Subject: Bug 368502 - "Bugzilla_logincookie should not be accessible via
 javascript" [p=reed r+a=mkanat]

---
 Bugzilla/Install/Requirements.pm | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'Bugzilla/Install/Requirements.pm')

diff --git a/Bugzilla/Install/Requirements.pm b/Bugzilla/Install/Requirements.pm
index fd3dcf589..2216d963d 100644
--- a/Bugzilla/Install/Requirements.pm
+++ b/Bugzilla/Install/Requirements.pm
@@ -61,7 +61,8 @@ sub REQUIRED_MODULES {
         module  => 'CGI',
         # Perl 5.10 requires CGI 3.33 due to a taint issue when
         # uploading attachments, see bug 416382.
-        version => (vers_cmp($perl_ver, '5.10') > -1) ? '3.33' : '2.93'
+        # Require CGI 3.21 for -httponly support, see bug 368502.
+        version => (vers_cmp($perl_ver, '5.10') > -1) ? '3.33' : '3.21'
     },
     {
         package => 'TimeDate',
-- 
cgit v1.2.3-24-g4f1b