Bug 235510: Do not expose user password in URL to chart image if login required to...

patch by gerv
r=kiko
a=justdave

diff --git a/chart.cgi b/chart.cgi
index b6f7f746b541458d792eef7015081d7316abff3f..d3f6f5ccc1d91fe077a9a58dd2a3ae0c4eaff0e2 100755 (executable)
--- a/chart.cgi
+++ b/chart.cgi
@@ -284,7 +284,8 @@ sub wrap {
     $vars->{'time'} = time();
 
     $vars->{'imagebase'} = $cgi->canonicalise_query(
-                "action", "action-wrap", "ctype", "format", "width", "height");
+                "action", "action-wrap", "ctype", "format", "width", "height",
+                "Bugzilla_login", "Bugzilla_password");
 
     print "Content-Type:text/html\n\n";
     $template->process("reports/chart.html.tmpl", $vars)