Bug 786310: Remove tokens when saving the default query

r= LpSolit, a=LpSolit

diff --git a/buglist.cgi b/buglist.cgi
index d8da0a6bb2d872e3325d6fd1b0678df63dc79819..8185491d9214184cca318482dd07cf1e66b6fc7e 100755 (executable)
--- a/buglist.cgi
+++ b/buglist.cgi
@@ -435,6 +435,8 @@ elsif (($cmdtype eq "doit") && defined $cgi->param('remtype')) {
         $user = Bugzilla->login(LOGIN_REQUIRED);
         my $token = $cgi->param('token');
         check_hash_token($token, ['searchknob']);
+        $buffer = $params->canonicalise_query('cmdtype', 'remtype',
+                                              'query_based_on', 'token');
         InsertNamedQuery(DEFAULT_QUERY_NAME, $buffer);
         $vars->{'message'} = "buglist_new_default_query";
     }