Bug 329334: User::match_field() may redirect you outside your Bugzilla installation...

diff --git a/Bugzilla/User.pm b/Bugzilla/User.pm
index 7f2bff4c53e9445089deaa57bb1764b5e38019e5..226c1e15c9b6cb760a5a1ebed70a0409b7b501b2 100644 (file)
--- a/Bugzilla/User.pm
+++ b/Bugzilla/User.pm
@@ -982,7 +982,7 @@ sub match_field {
     # Skip confirmation if we were told to, or if we don't need to confirm.
     return $retval if ($behavior == MATCH_SKIP_CONFIRM || !$need_confirm);
 
-    $vars->{'script'}        = $ENV{'SCRIPT_NAME'}; # for self-referencing URLs
+    $vars->{'script'}        = Bugzilla->cgi->url(-relative => 1); # for self-referencing URLs
     $vars->{'fields'}        = $fields; # fields being matched
     $vars->{'matches'}       = $matches; # matches that were made
     $vars->{'matchsuccess'}  = $matchsuccess; # continue or fail