summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSimon Green <sgreen+mozilla@redhat.com>2012-05-17 15:16:45 +0200
committerFrédéric Buclin <LpSolit@gmail.com>2012-05-17 15:16:45 +0200
commitb4cf4eb6a5871774ac19db4979f8d6c05b812c07 (patch)
treedb9bf073d5d9f7f0355a14ffe9a8283655a7a93c
parent631d1489d151b8f3d800bc1c3cb3a57235cbd282 (diff)
downloadbugzilla-b4cf4eb6a5871774ac19db4979f8d6c05b812c07.tar.gz
bugzilla-b4cf4eb6a5871774ac19db4979f8d6c05b812c07.tar.xz
Bug 752751: Perl modules that start with a protocol (eg HTTP::Header) are not escaped correctly in SAFE_URL_REGEXP
r/a=LpSolit
-rw-r--r--Bugzilla/Template.pm2
1 files changed, 1 insertions, 1 deletions
diff --git a/Bugzilla/Template.pm b/Bugzilla/Template.pm
index e5bd8edb7..a2efec48c 100644
--- a/Bugzilla/Template.pm
+++ b/Bugzilla/Template.pm
@@ -43,7 +43,7 @@ use constant FORMAT_2_SIZE => [19,55];
# Pseudo-constant.
sub SAFE_URL_REGEXP {
my $safe_protocols = join('|', SAFE_PROTOCOLS);
- return qr/($safe_protocols):[^\s<>\"]+[\w\/]/i;
+ return qr/($safe_protocols):[^:\s<>\"][^\s<>\"]+[\w\/]/i;
}
# Convert the constants in the Bugzilla::Constants and Bugzilla::WebService::Constants