diff options
| author | lpsolit%gmail.com <> | 2006-02-21 08:32:08 +0100 |
|---|---|---|
| committer | lpsolit%gmail.com <> | 2006-02-21 08:32:08 +0100 |
| commit | 39e8d6dc7a8371433d8260b86ebc12396da1de7a (patch) | |
| tree | 2d657fba0d4876115cd763c9e79cc6a1f339cd08 /Bugzilla/Config/Query.pm | |
| parent | d95cd6e4e888fe3daacf7d2f5ca688018ae19a00 (diff) | |
| download | bugzilla-39e8d6dc7a8371433d8260b86ebc12396da1de7a.tar.gz bugzilla-39e8d6dc7a8371433d8260b86ebc12396da1de7a.tar.xz | |
[SECURITY] editparams.cgi doesn't check whether 'whinedays' and 'mostfreqthreshold' are numeric - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=justdave
Diffstat (limited to 'Bugzilla/Config/Query.pm')
| -rw-r--r-- | Bugzilla/Config/Query.pm | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/Bugzilla/Config/Query.pm b/Bugzilla/Config/Query.pm index b86339fc9..e3996a0ee 100644 --- a/Bugzilla/Config/Query.pm +++ b/Bugzilla/Config/Query.pm @@ -51,7 +51,8 @@ sub get_param_list { { name => 'mostfreqthreshold', type => 't', - default => '2' + default => '2', + checker => \&check_numeric }, { |