Patch by Brian Duggan <bduggan@oven.com> -- security improvements.

1 files changed, 3 insertions, 0 deletions

diff --git a/CGI.pl b/CGI.pl
index 8f80826d2..c8dc98e2c 100644
--- a/CGI.pl
+++ b/CGI.pl
@@ -842,6 +842,9 @@ sub CheckIfVotedConfirmed {
 sub DumpBugActivity {
     my ($id, $starttime) = (@_);
     my $datepart = "";
+
+    die "Invalid id: $id" unless $id=~/^\s*\d+\s*$/;
+
     if (defined $starttime) {
         $datepart = "and bugs_activity.bug_when >= $starttime";
     }