Bug 346564: [SECURITY] timetracking deadline leaks in XML - Patch by Olav Vitters...

diff --git a/show_bug.cgi b/show_bug.cgi
index 8e964b765a4a04d8ae47f1cf22c18458ce219f95..a0262393ccc1fe7e7a3a198ef245f9ca305acd0d 100755 (executable)
--- a/show_bug.cgi
+++ b/show_bug.cgi
@@ -116,7 +116,7 @@ if ($cgi->param("field")) {
 }
 
 unless (UserInGroup(Param("timetrackinggroup"))) {
-    @fieldlist = grep($_ !~ /_time$/, @fieldlist);
+    @fieldlist = grep($_ !~ /(^deadline|_time)$/, @fieldlist);
 }
 
 foreach (@fieldlist) {