diff options
| author |   jocuri%softhome.net <> | 2004-06-12 00:03:50 +0000 |
|---|---|---|
| committer | jocuri%softhome.net <> | 2004-06-12 00:03:50 +0000 |
| commit | 769f4071b43017decf24293fb15fdea5245bf712 (patch) | |
| tree | 85ba0467955afa6b92f6360d047a4a21ae8cc0e4 | |
| parent | Patch for bug 240252: rewrite "users who are a" on editproducts.cgi; r=kiko; ... (diff) | |
| download | bugzilla-769f4071b43017decf24293fb15fdea5245bf712.tar.gz bugzilla-769f4071b43017decf24293fb15fdea5245bf712.tar.bz2 bugzilla-769f4071b43017decf24293fb15fdea5245bf712.zip | |
Patch for bug 245976: fix software error caused by taint issue when trying to add a milestone; patch by Byron Jones (glob) <bugzilla@glob.com.au>; r=vladd, a=justdave.
| -rwxr-xr-x | editmilestones.cgi | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/editmilestones.cgi b/editmilestones.cgi index 43cded1ea..5100577ee 100755 --- a/editmilestones.cgi +++ b/editmilestones.cgi @@ -294,7 +294,7 @@ if ($action eq 'new') { PutTrailer($localtrailer); exit; } - if ($sortkey!~/^[0-9]+$/) { + if (!detaint_natural($sortkey)) { print "The sortkey for a milestone must be a number. Please press\n"; print "<b>Back</b> and try again.\n"; PutTrailer($localtrailer); |