Re: Bugzilla upgrade - opening attachments in browser

[Max Kanat-Alexander]

Hey Jeremy. Which parameter, attachment_base or 
allow_attachment_display? And do you mean that you unset the 
cookiedomain parameter, or...? (Usually cookiedomain shouldn't be set at 
all.)

-Max

Jeremy Newman wrote:
> The parameter has been set, as well as the cookie domain param.
>
> -Newman
>
> Max Kanat-Alexander wrote:
> > Hey Jeremy. The allow_attachment_display parameter has a detailed 
> >
> > description that notes that you are opening a security hole if you set 
> > it without setting another parameter (which you haven't set). Did you 
> > read the description of the parameter?
> > -Max