From: bugreport%peshkin.net <>
Date: Sat, 10 Jul 2004 14:12:21 +0000 (+0000)
Subject: Bug 235510: Do not expose user password in URL to chart image if login required to... 
X-Git-Tag: bugzilla-2.18rc1~13
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a987df219a7aa54ae2429488f9f5655402463dc5;p=thirdparty%2Fbugzilla.git

Bug 235510: Do not expose user password in URL to chart image if login required to access a chart
patch by gerv
r=kiko
a=justdave
---

diff --git a/chart.cgi b/chart.cgi
index b6f7f746b5..d3f6f5ccc1 100755
--- a/chart.cgi
+++ b/chart.cgi
@@ -284,7 +284,8 @@ sub wrap {
     $vars->{'time'} = time();
 
     $vars->{'imagebase'} = $cgi->canonicalise_query(
-                "action", "action-wrap", "ctype", "format", "width", "height");
+                "action", "action-wrap", "ctype", "format", "width", "height",
+                "Bugzilla_login", "Bugzilla_password");
 
     print "Content-Type:text/html\n\n";
     $template->process("reports/chart.html.tmpl", $vars)