зеркало из https://github.com/mozilla/gecko-dev.git
[SECURITY] Bug 325079: The login form on the Bugzilla home page may redirect your login and password to another site - Patch by Fr�d�ric Buclin <LpSolit@gmail.com> r=myk a=justdave
This commit is contained in:
Родитель
383de920a1
Коммит
a3397e9b48
|
@ -21,7 +21,19 @@
|
|||
|
||||
[% PROCESS global/variables.none.tmpl %]
|
||||
|
||||
<form name="login" action="[% cgi.script_name FILTER html %]" method="POST">
|
||||
[%# Use the current script name. If an empty name is retuned,
|
||||
# then we are accessing the home page. %]
|
||||
|
||||
[% script_name = cgi.url(Relative => 1) %]
|
||||
|
||||
[%# If SSL is in use, use 'sslbase', else use 'urlbase'. %]
|
||||
[% IF Param("sslbase") != "" && Param("ssl") != "never" %]
|
||||
[% script_name = Param("sslbase") _ script_name %]
|
||||
[% ELSE %]
|
||||
[% script_name = Param("urlbase") _ script_name %]
|
||||
[% END %]
|
||||
|
||||
<form name="login" action="[% script_name FILTER html %]" method="POST">
|
||||
<table>
|
||||
<tr>
|
||||
<td align="right"><b>Login:</b></td>
|
||||
|
|
Загрузка…
Ссылка в новой задаче