Re: Bugzilla upgrade - opening attachments in browser

[Austin English]

On Wed, May 20, 2009 at 6:05 AM, Igor Tarasov <tarasov.igor(a)gmail.com> wrote:
> attachment.cgi shows that it relies on allow_attachment_display
> parameter in bugzilla configuration. It has to be set to true.
>
> --
> Igor

Can a bugzilla admin please enable this?

-- 
-Austin

Bugzilla upgrade - opening attachments in browser

[Jeremy Newman]

OK, it is now enabled.

-Newman

Austin English wrote:
> On Wed, May 20, 2009 at 6:05 AM, Igor Tarasov <tarasov.igor(a)gmail.com> wrote:
> > attachment.cgi shows that it relies on allow_attachment_display
> > parameter in bugzilla configuration. It has to be set to true.
> >
> > --
> > Igor
>
> Can a bugzilla admin please enable this?

Bugzilla upgrade - opening attachments in browser

[Max Kanat-Alexander]

Hey Jeremy. The allow_attachment_display parameter has a detailed 
description that notes that you are opening a security hole if you set 
it without setting another parameter (which you haven't set). Did you 
read the description of the parameter?

	-Max
-- 
http://www.everythingsolved.com/
Competent, Friendly Bugzilla and Perl Services. Everything Else, too.

Bugzilla upgrade - opening attachments in browser

[Jeremy Newman]

The parameter has been set, as well as the cookie domain param.

-Newman

Max Kanat-Alexander wrote:
> Hey Jeremy. The allow_attachment_display parameter has a detailed 
> description that notes that you are opening a security hole if you set 
> it without setting another parameter (which you haven't set). Did you 
> read the description of the parameter?
>
> -Max

Bugzilla upgrade - opening attachments in browser

[Max Kanat-Alexander]

Hey Jeremy. Which parameter, attachment_base or 
allow_attachment_display? And do you mean that you unset the 
cookiedomain parameter, or...? (Usually cookiedomain shouldn't be set at 
all.)

	-Max

Jeremy Newman wrote:
> The parameter has been set, as well as the cookie domain param.
>
> -Newman
>
> Max Kanat-Alexander wrote:
> > Hey Jeremy. The allow_attachment_display parameter has a detailed 
> > description that notes that you are opening a security hole if you set 
> > it without setting another parameter (which you haven't set). Did you 
> > read the description of the parameter?
> >
> > -Max

-- 
http://www.everythingsolved.com/
Competent, Friendly Bugzilla and Perl Services. Everything Else, too.