Skip to content

bugzilla
bugzilla
Commit 80d6208e authored by karl%kornel.name's avatar karl%kornel.name
Browse files
Options

Bug 313679: Changing email address in sudo mode logs user in as

impersonated user - Patch by A. Karl Kornel <karl@kornel.name> r=wurblzap a=justdave
parent ae887eab
Show whitespace changes
Inline Side-by-side
Showing with 3 additions and 1 deletion
userprefs.cgi
View file @ 80d6208e
...@@ -420,9 +420,11 @@ sub SaveSavedSearches { ...@@ -420,9 +420,11 @@ sub SaveSavedSearches {
my $cgi = Bugzilla->cgi; my $cgi = Bugzilla->cgi;
# This script needs direct access to the username and password CGI variables, # This script needs direct access to the username and password CGI variables,
# so we save them before their removal in Bugzilla->login # so we save them before their removal in Bugzilla->login, and delete them
# prior to login if we might possibly be in an sudo session.
my $bugzilla_login = $cgi->param('Bugzilla_login'); my $bugzilla_login = $cgi->param('Bugzilla_login');
my $bugzilla_password = $cgi->param('Bugzilla_password'); my $bugzilla_password = $cgi->param('Bugzilla_password');
$cgi->delete('Bugzilla_login', 'Bugzilla_password') if ($cgi->cookie('sudo'));
Bugzilla->login(LOGIN_REQUIRED); Bugzilla->login(LOGIN_REQUIRED);
$cgi->param('Bugzilla_login', $bugzilla_login); $cgi->param('Bugzilla_login', $bugzilla_login);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment