Bug 346564: [SECURITY] timetracking deadline leaks in XML - Patch by Olav Vitters...

diff --git a/show_bug.cgi b/show_bug.cgi
index 4d6819a361915a42729f72d0205185b1617bbc44..68c1edc57dfd61ce339943aeeb048f99fbcc7d10 100755 (executable)
--- a/show_bug.cgi
+++ b/show_bug.cgi
@@ -117,7 +117,7 @@ if ($cgi->param("field")) {
 }
 
 unless (UserInGroup(Param("timetrackinggroup"))) {
-    @fieldlist = grep($_ !~ /_time$/, @fieldlist);
+    @fieldlist = grep($_ !~ /(^deadline|_time)$/, @fieldlist);
 }
 
 foreach (@fieldlist) {