365308 - format=__default__ is dangerous and should either not be allowed for people w/o canconfirm or shouldn't be suggested

Status: RESOLVED WONTFIX

(bugzilla.mozilla.org :: General, defect)

Description

[timeless]

either we shouldn't allow it, or we shouldn't link to it.

an end user clicked on the link in the header:

Bugzilla was upgraded on December 26th at 6pm PST (2am Wednesday UTC). If you find any problems with Bugzilla that you suspect are a result of this upgrade, please <file a bug reporting the regression>. Any issues not related to Bugzilla should be reported here. If you're interested in knowing what changed, we have a list of changes.

GET /enter_bug.cgi?product=mozilla.org&component=Bugzilla:+Other+b.m.o+Issues&blocked=bmo-regressions&format=__default__ HTTP/1.1

from a report page. which let the user escape guided form. this resulted in an *awful* bug.

For reference, I'm filing this bug w/o canconfirm+editbugs.

Comment 1

[Dave Miller [:justdave]]

we have to have a way to override this for the pre-fill forms to work.  This was argued ad-nauseum when it first got added three years ago.

Comment 2

[timeless]

is this because guided doesn't accept the prefill input? if so, that's a bug. we should fix that.

we're getting enough bad bugs that both lucy and myself investigated.