Bug 754090: Bugzilla::FlagType::match() crashes when the group parameter is not a number

a=LpSolit

1 files changed, 3 insertions, 0 deletions

diff --git a/editflagtypes.cgi b/editflagtypes.cgi
index 4603aee38..e9c430d7d 100755
--- a/editflagtypes.cgi
+++ b/editflagtypes.cgi
@@ -141,6 +141,9 @@ if ($action eq 'list') {
     my $component_id = $component ? $component->id : 0;
     my $show_flag_counts = $cgi->param('show_flag_counts') ? 1 : 0;
     my $group_id = $cgi->param('group');
+    if ($group_id) {
+        detaint_natural($group_id) || ThrowUserError('invalid_group_ID');
+    }
 
     my $bug_flagtypes;
     my $attach_flagtypes;