[SECURITY] editparams.cgi doesn't check whether 'whinedays' and…

[SECURITY] editparams.cgi doesn't check whether 'whinedays' and 'mostfreqthreshold' are numeric - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=justdave

[SECURITY] editparams.cgi doesn't check whether 'whinedays' and…
39e8d6dc · lpsolit%gmail.com · d95cd6e4 · 39e8d6dc · 39e8d6dc
Commit 39e8d6dc authored Feb 21, 2006 by lpsolit%gmail.com
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 2 deletions

MTA.pm Bugzilla/Config/MTA.pm +2 -1

Query.pm Bugzilla/Config/Query.pm +2 -1

No files found.
--- a/Bugzilla/Config/MTA.pm
+++ b/Bugzilla/Config/MTA.pm
@@ -104,7 +104,8 @@ Configure bugmail: %urlbase%userprefs.cgi?tab=email
  {
   name => 'whinedays',
   type => 't',
-   default => 7
+   default => 7,
+   checker => \&check_numeric
  },
  {

--- a/Bugzilla/Config/Query.pm
+++ b/Bugzilla/Config/Query.pm
@@ -51,7 +51,8 @@ sub get_param_list {
  {
   name => 'mostfreqthreshold',
   type => 't',
-   default => '2'
+   default => '2',
+   checker => \&check_numeric
  },
  {