From afa23774e953411a0b7ad73739970d5b81495195 Mon Sep 17 00:00:00 2001
From: Dave Lawrence <dlawrence@mozilla.com>
Date: Mon, 12 Aug 2013 11:27:34 -0400
Subject: Bug 899537 - backport upstream bug 897029 to bmo/4.2 for performance
 improvement r=glob

---
 Bugzilla/User.pm | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'Bugzilla/User.pm')

diff --git a/Bugzilla/User.pm b/Bugzilla/User.pm
index bd7c8123b..f1803ac79 100644
--- a/Bugzilla/User.pm
+++ b/Bugzilla/User.pm
@@ -892,6 +892,14 @@ sub visible_bugs {
     if (@check_ids) {
         my $dbh = Bugzilla->dbh;
         my $user_id = $self->id;
+
+        foreach my $id (@check_ids) {
+            my $orig_id = $id;
+            detaint_natural($id)
+                || ThrowCodeError('param_must_be_numeric', { param    => $orig_id,
+                                                             function => 'Bugzilla::User->visible_bugs'});
+        }
+
         my $sth;
         # Speed up the can_see_bug case.
         if (scalar(@check_ids) == 1) {
-- 
cgit v1.2.3-24-g4f1b