diff options
| author |   bugreport%peshkin.net <> | 2004-07-10 14:17:02 +0000 |
|---|---|---|
| committer | bugreport%peshkin.net <> | 2004-07-10 14:17:02 +0000 |
| commit | 386cc09bdd56a413836a4e74579f60772bbf0e80 (patch) | |
| tree | b9715c3a56a77a9b31a89eacad3139ae15284b9a /duplicates.cgi | |
| parent | Bug 235510: Do not expose user password in URL to chart image if login requir... (diff) | |
| download | bugzilla-386cc09bdd56a413836a4e74579f60772bbf0e80.tar.gz bugzilla-386cc09bdd56a413836a4e74579f60772bbf0e80.tar.bz2 bugzilla-386cc09bdd56a413836a4e74579f60772bbf0e80.zip | |
Bug 234825: Keep duplicates.cgi from revealing products user doesnt have access to
r,a=justdave
Diffstat (limited to 'duplicates.cgi')
| -rwxr-xr-x | duplicates.cgi | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/duplicates.cgi b/duplicates.cgi index b45bd2710..744ad8147 100755 --- a/duplicates.cgi +++ b/duplicates.cgi @@ -266,7 +266,8 @@ $vars->{'openonly'} = $openonly; $vars->{'reverse'} = $reverse; $vars->{'format'} = $cgi->param('format'); $vars->{'query_products'} = \@query_products; -$vars->{'products'} = \@::legal_product; +my @selectable_products = GetSelectableProducts(); +$vars->{'products'} = \@selectable_products; my $format = GetFormat("reports/duplicates", scalar($cgi->param('format')), |