From fc7ebc28b0859d7ddecd704001ff1adc54856d47 Mon Sep 17 00:00:00 2001
From: "gerv%gerv.net" <>
Date: Sun, 9 Nov 2003 02:04:36 +0000
Subject: Bug 195530 - Make javascript version of buglists available, part 2.
 This is a security fix to prevent remote sites being able to see sensitive
 bug data. Patch by gerv; r=justdave, r=myk, a=justdave.

---
 template/en/default/list/list.js.tmpl | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'template/en/default/list/list.js.tmpl')

diff --git a/template/en/default/list/list.js.tmpl b/template/en/default/list/list.js.tmpl
index 8dde0c5b7..e6bc794c2 100644
--- a/template/en/default/list/list.js.tmpl
+++ b/template/en/default/list/list.js.tmpl
@@ -18,6 +18,11 @@
   #
   # Contributor(s): Gervase Markham <gerv@gerv.net>
   #%]
+
+// Note: only publicly-accessible bugs (those not in any group) will be
+// listed when using this JavaScript format. This is to prevent malicious
+// sites stealing information about secure bugs.
+  
 bugs = new Array; 
 
 [% FOREACH bug = bugs %]
-- 
cgit v1.2.3-24-g4f1b