Group Name Guessing Disclosure Policy
    Max Kanat-Alexander 
    mkanat at bugzilla.org
       
    Mon Jul 19 23:09:58 UTC 2010
    
    
  
On 07/19/2010 03:58 PM, Frédéric Buclin wrote:
> Remember that turning on the makeproductgroups parameter creates one
> group per product. Letting users guess group names means letting them
> guess product names as well, which we don't want.
	That's true. Although in the case where group names are confidential,
they can rename the group name to a code name, if they know that group
names can be guessed.
	-Max
-- 
http://www.everythingsolved.com/
Competent, Friendly Bugzilla and Perl Services. Everything Else, too.
    
    
More information about the developers
mailing list