Bug 141593 You can add/remove dependencies on bugs you can't see

Patch by Joel Peshkin <bugreport@peshkin.net>
r=lpsolit, a=justdave

1 files changed, 3 insertions, 1 deletions

diff --git a/post_bug.cgi b/post_bug.cgi
index 176b42d71..18faa5090 100755
--- a/post_bug.cgi
+++ b/post_bug.cgi
@@ -261,7 +261,9 @@ foreach my $field ("dependson", "blocked") {
         my @validvalues;
         foreach my $id (split(/[\s,]+/, $cgi->param($field))) {
             next unless $id;
-            ValidateBugID($id, $field);
+            # $field is not passed to ValidateBugID to prevent adding new 
+            # dependencies on inacessible bugs.
+            ValidateBugID($id);
             push(@validvalues, $id);
         }
         $cgi->param(-name => $field, -value => join(",", @validvalues));