[webkit-changes] [WebKit/WebKit] 767607: Removed "Restrict this session to this IP address ...

Ling Ho noreply at github.com
Thu Nov 17 15:46:23 PST 2022


  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 767607b793ea55aba274a30d43971c3b3a22c5bd
      https://github.com/WebKit/WebKit/commit/767607b793ea55aba274a30d43971c3b3a22c5bd
  Author: Ling Ho <lingho at apple.com>
  Date:   2022-11-17 (Thu, 17 Nov 2022)

  Changed paths:
    M Websites/bugs.webkit.org/template/en/default/account/auth/login.html.tmpl

  Log Message:
  -----------
  Removed "Restrict this session to this IP address (using this option improves security)" option from Bugzilla login screen.
https://bugs.webkit.org/show_bug.cgi?id=248060
<rdar://81468837>

Reviewed by Ryan Haddad.

* Websites/bugs.webkit.org/template/en/default/account/auth/login.html.tmpl:

Removing the form entry bypasses the check in Cookie.pm
    my $ip_addr;
    if ($input_params->{'Bugzilla_restrictlogin'}) {
        $ip_addr = remote_ip();
        # The IP address is valid, at least for comparing with itself in a
        # subsequent login
        trick_taint($ip_addr);
    }

Canonical link: https://commits.webkit.org/256807@main




More information about the webkit-changes mailing list