[webkit-changes] [WebKit/WebKit] 767607: Removed "Restrict this session to this IP address ...
Ling Ho
noreply at github.com
Thu Nov 17 15:46:23 PST 2022
Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 767607b793ea55aba274a30d43971c3b3a22c5bd
https://github.com/WebKit/WebKit/commit/767607b793ea55aba274a30d43971c3b3a22c5bd
Author: Ling Ho <lingho at apple.com>
Date: 2022-11-17 (Thu, 17 Nov 2022)
Changed paths:
M Websites/bugs.webkit.org/template/en/default/account/auth/login.html.tmpl
Log Message:
-----------
Removed "Restrict this session to this IP address (using this option improves security)" option from Bugzilla login screen.
https://bugs.webkit.org/show_bug.cgi?id=248060
<rdar://81468837>
Reviewed by Ryan Haddad.
* Websites/bugs.webkit.org/template/en/default/account/auth/login.html.tmpl:
Removing the form entry bypasses the check in Cookie.pm
my $ip_addr;
if ($input_params->{'Bugzilla_restrictlogin'}) {
$ip_addr = remote_ip();
# The IP address is valid, at least for comparing with itself in a
# subsequent login
trick_taint($ip_addr);
}
Canonical link: https://commits.webkit.org/256807@main
More information about the webkit-changes
mailing list