Closed Bug 952837 Opened 11 years ago Closed 11 years ago

Bugzilla outstanding requests email leaks secure bug summary

Categories

(bugzilla.mozilla.org :: General, defect)

Product:
bugzilla.mozilla.org
Component:
General
Version:
Production
Type:
defect
Priority:
Not set
Severity:
major

Tracking

()

Status:
RESOLVED INVALID

People

(Reporter: bc, Unassigned)

Details

1. file a bug and assign it to the security group
2. set a needinfo request
3. wait for the outstanding request

the outstanding request email will contain the full summary of the bug instead of "Secure bug".
Assignee: whining → nobody
Component: Whining → General
Product: Bugzilla → bugzilla.mozilla.org
QA Contact: default-qa
Version: unspecified → Production
You don't have a key set?  Mine have the entire mail encrypted when one of the bugs in the list is secured. So when it can't encrypt it's not hiding it?
I have a key set and my normal secure bug mail is encrypted and the subject does not contain the bug summary. The whine email for a secure bug sends the actual bug summary instead of the "Secure Bug" replacement text.
Oh, doh. The whine email itself is fully encrypted. sorry, -> invalid.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.