Closed Bug 233627 Opened 22 years ago Closed 14 years ago

Bugzilla should require absolute URI's before making a link

Categories

(Bugzilla :: Creating/Changing Bugs, defect)

Product:
Bugzilla
Component:
Creating/Changing Bugs
Platform:
x86
All
Type:
defect
Priority:
Not set
Severity:
minor

Tracking

()

Status:
RESOLVED WONTFIX

People

(Reporter: WeirdAl, Unassigned)

References

(
URL
)

Details

I'm a little concerned that I was able to file a comment with an http: prefix on ordinary text, and have it transformed into a link to a (in this case non-existent) file on the b.m.o domain. In my opinion, that's a little too loose; we should probably check for http:// instead of http: . Feel free to WONTFIX if you disagree.
Why is this a problem? It doesn't seem like any sort of security risk, and I don't think we need to nanny the user that much... Gerv
Here's my vote to WONTFIX.
QA Contact: mattyt-bugzilla → default-qa
Assignee: myk → create-and-change
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.