Commit 386cc09b authored by bugreport%peshkin.net's avatar bugreport%peshkin.net

Bug 234825: Keep duplicates.cgi from revealing products user doesnt have access to

r,a=justdave
parent a987df21
...@@ -266,7 +266,8 @@ $vars->{'openonly'} = $openonly; ...@@ -266,7 +266,8 @@ $vars->{'openonly'} = $openonly;
$vars->{'reverse'} = $reverse; $vars->{'reverse'} = $reverse;
$vars->{'format'} = $cgi->param('format'); $vars->{'format'} = $cgi->param('format');
$vars->{'query_products'} = \@query_products; $vars->{'query_products'} = \@query_products;
$vars->{'products'} = \@::legal_product; my @selectable_products = GetSelectableProducts();
$vars->{'products'} = \@selectable_products;
my $format = GetFormat("reports/duplicates", scalar($cgi->param('format')), my $format = GetFormat("reports/duplicates", scalar($cgi->param('format')),
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment