diff options
| author | bugreport%peshkin.net <> | 2004-07-10 17:03:15 +0200 |
|---|---|---|
| committer | bugreport%peshkin.net <> | 2004-07-10 17:03:15 +0200 |
| commit | 51bfafc74aa20129399ffe076ee526cb745dc371 (patch) | |
| tree | c9a5becfedf6078f1a2d402f6f914104d0a40433 /reports.cgi | |
| parent | bbf84c2e52d0365b1b95f119a6e81859599f08f5 (diff) | |
| download | bugzilla-51bfafc74aa20129399ffe076ee526cb745dc371.tar.gz bugzilla-51bfafc74aa20129399ffe076ee526cb745dc371.tar.xz | |
Bug 237627: Validate dataset name in reports.cgi
patch by teemu
r=justdave
a=justdave
Diffstat (limited to 'reports.cgi')
| -rwxr-xr-x | reports.cgi | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/reports.cgi b/reports.cgi index 01ce99277..685b16418 100755 --- a/reports.cgi +++ b/reports.cgi @@ -234,7 +234,7 @@ sub chart_image_name { # Instead, just require that each field name consists only of letters # and number - if ($datasets !~ m/[A-Za-z0-9:]/) { + if ($datasets !~ m/^[A-Za-z0-9:]+$/) { die "Invalid datasets $datasets"; } |