From 38fac1759c2ebcd108d5fa2dbc86d0b34e0f2951 Mon Sep 17 00:00:00 2001
From: "myk%mozilla.org" <>
Date: Sun, 7 Jul 2002 01:27:18 +0000
Subject: Fix for bug 155700: detaints bug ID in ValidateBugID so it doesn't
 fail taint checks. 2rx=bbaetz

---
 CGI.pl | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

(limited to 'CGI.pl')

diff --git a/CGI.pl b/CGI.pl
index 8e8da5871..4eeeaf5d2 100644
--- a/CGI.pl
+++ b/CGI.pl
@@ -276,8 +276,9 @@ sub ValidateBugID {
     $id = trim($id);
     
     # If the ID isn't a number, it might be an alias, so try to convert it.
-    if ($id !~ /^[1-9][0-9]*$/) {
-        $id = BugAliasToID($id);
+    my $alias = $id;
+    if (!detaint_natural($id)) {
+        $id = BugAliasToID($alias);
         if (!$id) {
             my $html_id = html_quote($_[0]);
             my $alias_specific_message = Param("usebugaliases") ? 
-- 
cgit v1.2.3-24-g4f1b