Bug 355728: [SECURITY] XSS in the "id" parameter of showdependencygraph.cgi when…

Bug 355728: [SECURITY] XSS in the "id" parameter of showdependencygraph.cgi when "doall" is set - Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit a=justdave

Bug 355728: [SECURITY] XSS in the "id" parameter of showdependencygraph.cgi when…
ba64b163 · lpsolit%gmail.com · 856dcd4d · ba64b163
Commit ba64b163 authored Apr 04, 2008 by lpsolit%gmail.com
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 4 deletions

rel_notes.txt docs/en/rel_notes.txt +3 -4

No files found.
--- a/docs/en/rel_notes.txt
+++ b/docs/en/rel_notes.txt
@@ -577,11 +577,10 @@ every login cookie Bugzilla has ever given out.)
 Version 2.22.1
 --------------

-The Bugzilla team fixed two Information Leaks and two Cross-Site
+The Bugzilla team fixed two Information Leaks and three Cross-Site
 Scripting vulnerabilities that existed in versions of Bugzilla
-prior to 2.22.1. None of them are considered to be of critical
-severity, but we still strongly recommend that you update any
-2.22 installation to 2.22.1.
+prior to 2.22.1. We strongly recommend that you update any 2.22 
+installation to 2.22.1, to be protected from these vulnerabilities.

 In addition, we have made an enhancement to security in this version
 of Bugzilla. In previous versions, it was possible for malicious