Skip to content

Bug 2056990 - #2728

Merged
dklawren merged 1 commit into
mozilla:masterfrom
dklawren:2056990
Aug 25, 2026
Merged

Bug 2056990#2728
dklawren merged 1 commit into
mozilla:masterfrom
dklawren:2056990

Conversation

@dklawren

Copy link
Copy Markdown
Collaborator

r+ carried over from private pull request
https://bugzilla.mozilla.org/show_bug.cgi?id=2056990

Copilot AI balanced review requested due to automatic review settings August 25, 2026 18:22

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds visibility-aware keyword counts to prevent leaking restricted security bug totals.

Changes:

  • Recognizes csectype-* as security keywords.
  • Filters keyword counts by group membership.
  • Adds regression tests for restricted counts.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File Description
Bugzilla/Keyword.pm Adds security classification and visibility-filtered counts.
describekeywords.cgi Uses centralized security-keyword detection.
t/bmo/keyword-security-count.t Tests classification and restricted counts.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread Bugzilla/Keyword.pm
Comment on lines +99 to +102
# The reporter/assignee/qa/cc visibility exceptions (see
# Bugzilla::User->visible_bugs) are intentionally not applied here: ignoring
# them can only make a count lower than the user's true visibility, never
# higher, so no restricted data can leak. Using a conditional COUNT (rather
@dklawren
dklawren merged commit 3db3d64 into mozilla:master Aug 25, 2026
8 checks passed
@dklawren
dklawren deleted the 2056990 branch August 25, 2026 18:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants