From 16122921b2f68b490a61cd80ae9ea5ee661ae11b Mon Sep 17 00:00:00 2001 From: David Lawrence Date: Wed, 21 Jan 2015 20:37:49 +0000 Subject: Bug 1090275: WebServices modules should maintain a whitelist of methods that are allowed instead of allowing access to any function imported into its namespace r=dylan,a=glob --- Bugzilla/WebService/Bugzilla.pm | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'Bugzilla/WebService/Bugzilla.pm') diff --git a/Bugzilla/WebService/Bugzilla.pm b/Bugzilla/WebService/Bugzilla.pm index b4ebd55ae..45ef326ac 100644 --- a/Bugzilla/WebService/Bugzilla.pm +++ b/Bugzilla/WebService/Bugzilla.pm @@ -34,6 +34,15 @@ use constant READ_ONLY => qw( version ); +use constant PUBLIC_METHODS => qw( + extensions + last_audit_time + parameters + time + timezone + version +); + # Logged-out users do not need to know more than that. use constant PARAMETERS_LOGGED_OUT => qw( maintainer -- cgit v1.2.3-24-g4f1b