From b4cf4eb6a5871774ac19db4979f8d6c05b812c07 Mon Sep 17 00:00:00 2001
From: Simon Green <sgreen+mozilla@redhat.com>
Date: Thu, 17 May 2012 15:16:45 +0200
Subject: Bug 752751: Perl modules that start with a protocol (eg HTTP::Header)
 are not escaped correctly in SAFE_URL_REGEXP r/a=LpSolit

---
 Bugzilla/Template.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'Bugzilla/Template.pm')

diff --git a/Bugzilla/Template.pm b/Bugzilla/Template.pm
index e5bd8edb7..a2efec48c 100644
--- a/Bugzilla/Template.pm
+++ b/Bugzilla/Template.pm
@@ -43,7 +43,7 @@ use constant FORMAT_2_SIZE => [19,55];
 # Pseudo-constant.
 sub SAFE_URL_REGEXP {
     my $safe_protocols = join('|', SAFE_PROTOCOLS);
-    return qr/($safe_protocols):[^\s<>\"]+[\w\/]/i;
+    return qr/($safe_protocols):[^:\s<>\"][^\s<>\"]+[\w\/]/i;
 }
 
 # Convert the constants in the Bugzilla::Constants and Bugzilla::WebService::Constants
-- 
cgit v1.2.3-24-g4f1b