diff options
| author | Simon Green <sgreen+mozilla@redhat.com> | 2012-05-17 15:16:45 +0200 |
|---|---|---|
| committer | Frédéric Buclin <LpSolit@gmail.com> | 2012-05-17 15:16:45 +0200 |
| commit | b4cf4eb6a5871774ac19db4979f8d6c05b812c07 (patch) | |
| tree | db9bf073d5d9f7f0355a14ffe9a8283655a7a93c /Bugzilla/Template.pm | |
| parent | 631d1489d151b8f3d800bc1c3cb3a57235cbd282 (diff) | |
| download | bugzilla-b4cf4eb6a5871774ac19db4979f8d6c05b812c07.tar.gz bugzilla-b4cf4eb6a5871774ac19db4979f8d6c05b812c07.tar.xz | |
Bug 752751: Perl modules that start with a protocol (eg HTTP::Header) are not escaped correctly in SAFE_URL_REGEXP
r/a=LpSolit
Diffstat (limited to 'Bugzilla/Template.pm')
| -rw-r--r-- | Bugzilla/Template.pm | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/Bugzilla/Template.pm b/Bugzilla/Template.pm index e5bd8edb7..a2efec48c 100644 --- a/Bugzilla/Template.pm +++ b/Bugzilla/Template.pm @@ -43,7 +43,7 @@ use constant FORMAT_2_SIZE => [19,55]; # Pseudo-constant. sub SAFE_URL_REGEXP { my $safe_protocols = join('|', SAFE_PROTOCOLS); - return qr/($safe_protocols):[^\s<>\"]+[\w\/]/i; + return qr/($safe_protocols):[^:\s<>\"][^\s<>\"]+[\w\/]/i; } # Convert the constants in the Bugzilla::Constants and Bugzilla::WebService::Constants |