Bugzilla upgrade - opening attachments in browser

[Max Kanat-Alexander]

	Hey Jeremy. Which parameter, attachment_base or 
allow_attachment_display? And do you mean that you unset the 
cookiedomain parameter, or...? (Usually cookiedomain shouldn't be set at 
all.)

	-Max

Jeremy Newman wrote:
> The parameter has been set, as well as the cookie domain param.
> 
> -Newman
> 
> Max Kanat-Alexander wrote:
>>     Hey Jeremy. The allow_attachment_display parameter has a detailed 
>> description that notes that you are opening a security hole if you set 
>> it without setting another parameter (which you haven't set). Did you 
>> read the description of the parameter?
>>
>>     -Max


-- 
http://www.everythingsolved.com/
Competent, Friendly Bugzilla and Perl Services. Everything Else, too.