Bug 346564: [SECURITY] timetracking deadline leaks in XML - Patch by Olav Vitters...

diff --git a/show_bug.cgi b/show_bug.cgi
index 06a7b6425cc8affb83884332c8d4577aa7a9979d..37d31efe09625e8a435636af006107ab34be4bea 100755 (executable)
--- a/show_bug.cgi
+++ b/show_bug.cgi
@@ -120,7 +120,7 @@ if ($cgi->param("field")) {
 }
 
 unless (Bugzilla->user->in_group(Bugzilla->params->{"timetrackinggroup"})) {
-    @fieldlist = grep($_ !~ /_time$/, @fieldlist);
+    @fieldlist = grep($_ !~ /(^deadline|_time)$/, @fieldlist);
 }
 
 foreach (@fieldlist) {