Bug 382974: $duplicate can be set even when not marking a bug as a dupe (security check bypass) - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=LpSolit