From dff1da5006f26fa63bfd5de353c711133df1da03 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Nicolas=20L=C3=A9cureuil?= Date: Thu, 20 Apr 2017 12:56:47 +0200 Subject: bugzilla: Add comment about bugzilla_secret_key --- modules/bugzilla/templates/localconfig | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'modules/bugzilla') diff --git a/modules/bugzilla/templates/localconfig b/modules/bugzilla/templates/localconfig index 3e304084..61935552 100644 --- a/modules/bugzilla/templates/localconfig +++ b/modules/bugzilla/templates/localconfig @@ -119,4 +119,9 @@ $interdiffbin = '/usr/bin/interdiff'; # are using that feature of the Patch Viewer.) $diffpath = '/usr/bin'; +# This secret key is used by your installation for the creation and +# validation of encrypted tokens. These tokens are used to implement +# security features in Bugzilla, to protect against certain types of attacks. +# A random string is generated by default. It's very important that this key +# is kept secret. It also must be very long. $site_wide_secret = '<%= bugzilla_secret_key %>'; -- cgit v1.2.1