From 51bfafc74aa20129399ffe076ee526cb745dc371 Mon Sep 17 00:00:00 2001 From: "bugreport%peshkin.net" <> Date: Sat, 10 Jul 2004 15:03:15 +0000 Subject: Bug 237627: Validate dataset name in reports.cgi patch by teemu r=justdave a=justdave --- reports.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'reports.cgi') diff --git a/reports.cgi b/reports.cgi index 01ce99277..685b16418 100755 --- a/reports.cgi +++ b/reports.cgi @@ -234,7 +234,7 @@ sub chart_image_name { # Instead, just require that each field name consists only of letters # and number - if ($datasets !~ m/[A-Za-z0-9:]/) { + if ($datasets !~ m/^[A-Za-z0-9:]+$/) { die "Invalid datasets $datasets"; } -- cgit v1.2.3-24-g4f1b