Closed Bug 1754540 Opened 2 years ago Closed 2 years ago

Remove code that handles change requests as no longer needed

Categories

(bugzilla.mozilla.org :: Extensions, defect)

defect

Tracking

()

RESOLVED FIXED

People

(Reporter: dveditz, Assigned: dkl)

Details

Attachments

(1 file)

+++ This bug was initially created as a clone of Bug #1754486 +++

Bug 1754486 noticed found a link on an old server for employees to file requests with the now-gone mozilla.service-now.com service. A malicious person could claim that domain in service-now since we no longer use them, and then get potentially sensitive internal information (and maybe log in credentials?).

Turns out that very bug in bugzilla has the same problem. I don't know if it shows up elsewhere, but it's at least in the "Infrastructure & Operations" product.

STR

  1. go to bug 1754486
  2. Click the "Edit Bug" button at the top
  3. Go to the "Details" section and look at the "Change Request" field

Actual result:
There's a ServiceNow Change Request to a server we don't own

Expected result:
one of

  1. A link to the correct change-request system
  2. no link at all
  3. not even a "Change Request" field... use See Also to track related JIRA tickets?

I don't know if other products/components have similar links. The products I normally work with don't have a Change Request field.

I have made the cf_cab_review custom field in BMO obsolete which is supposed to disable the field. In this case, it removes
the broken link (good) and the drop down values. But the field label and empty drop down still appear which will need to
be fixed. I will look at fixing the latter. But the link is gone which is good.

Assignee: nobody → dkl
Status: NEW → ASSIGNED

Thanks!

From my POV you can mark this FIXED, but if you want to leave it open to cover the other changes you want to do that's fine too

(In reply to Daniel Veditz [:dveditz] from comment #3)

From my POV you can mark this FIXED, but if you want to leave it open to cover the other changes you want to do that's fine too

Summary: Remove links to file change requests on non-existing mozilla.service-now.com (domain could be claimed by someone else) → Remove code that handles change requests as no longer needed
Attached file GitHub Pull Request
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Group: mozilla-employee-confidential
Component: Bug Creation/Editing → Extensions
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: