From ce590bf022ef6c2fc0c0c902d773ec7a53e7e4ad Mon Sep 17 00:00:00 2001
From: Frédéric Buclin <LpSolit@gmail.com>
Date: Mon, 6 Oct 2014 14:25:06 +0000
Subject: Bug 1075578: [SECURITY] Improper filtering of CGI arguments
 r=dkl,a=sgreen

---
 token.cgi | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'token.cgi')

diff --git a/token.cgi b/token.cgi
index 901094be4..a321974c3 100755
--- a/token.cgi
+++ b/token.cgi
@@ -382,7 +382,7 @@ sub confirm_create_account {
 
     my $otheruser = Bugzilla::User->create({
         login_name => $login_name, 
-        realname   => $cgi->param('realname'), 
+        realname   => scalar $cgi->param('realname'),
         cryptpassword => $password});
 
     # Now delete this token.
-- 
cgit v1.2.3-24-g4f1b