summaryrefslogtreecommitdiffstats
path: root/attachment.cgi
diff options
context:
space:
mode:
Diffstat (limited to 'attachment.cgi')
-rwxr-xr-xattachment.cgi8
1 files changed, 7 insertions, 1 deletions
diff --git a/attachment.cgi b/attachment.cgi
index 44a49c5f7..83a910ee0 100755
--- a/attachment.cgi
+++ b/attachment.cgi
@@ -932,7 +932,13 @@ sub insert
# Define the variables and functions that will be passed to the UI template.
$vars->{'mailrecipients'} = { 'changer' => $::COOKIE{'Bugzilla_login'},
'owner' => $owner };
- $vars->{'bugid'} = $::FORM{'bugid'};
+ my $bugid = $::FORM{'bugid'};
+ detaint_natural($bugid); # don't bother with error condition, we know it'll work
+ # because of ValidateBugID above. This is only needed
+ # for Perl 5.6.0. If we ever require Perl 5.6.1 or
+ # newer, or detaint something other than $::FORM{'bugid'}
+ # in ValidateBugID above, then this can go away.
+ $vars->{'bugid'} = $bugid;
$vars->{'attachid'} = $attachid;
$vars->{'description'} = $description;
$vars->{'contenttypemethod'} = $::FORM{'contenttypemethod'};