diff options
Diffstat (limited to 'Bugzilla/Config.pm')
| -rw-r--r-- | Bugzilla/Config.pm | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/Bugzilla/Config.pm b/Bugzilla/Config.pm index 0d61abb7d..5dfe2e37d 100644 --- a/Bugzilla/Config.pm +++ b/Bugzilla/Config.pm @@ -309,7 +309,13 @@ sub read_param_file { } # JSON::XS doesn't detaint data for us. foreach my $key (keys %params) { - trick_taint($params{$key}) if defined $params{$key}; + if (ref($params{$key}) eq "ARRAY") { + foreach my $item (@{$params{$key}}) { + trick_taint($item); + } + } else { + trick_taint($params{$key}) if defined $params{$key}; + } } } elsif ($ENV{'SERVER_SOFTWARE'}) { |