diff options
| -rwxr-xr-x | attachment.cgi | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/attachment.cgi b/attachment.cgi index 44a49c5f7..83a910ee0 100755 --- a/attachment.cgi +++ b/attachment.cgi @@ -932,7 +932,13 @@ sub insert # Define the variables and functions that will be passed to the UI template. $vars->{'mailrecipients'} = { 'changer' => $::COOKIE{'Bugzilla_login'}, 'owner' => $owner }; - $vars->{'bugid'} = $::FORM{'bugid'}; + my $bugid = $::FORM{'bugid'}; + detaint_natural($bugid); # don't bother with error condition, we know it'll work + # because of ValidateBugID above. This is only needed + # for Perl 5.6.0. If we ever require Perl 5.6.1 or + # newer, or detaint something other than $::FORM{'bugid'} + # in ValidateBugID above, then this can go away. + $vars->{'bugid'} = $bugid; $vars->{'attachid'} = $attachid; $vars->{'description'} = $description; $vars->{'contenttypemethod'} = $::FORM{'contenttypemethod'}; |