Commit 45381096 authored by David Lawrence's avatar David Lawrence

Bug 990252 - Using the webservices API, passing in certain keys as parameters…

Bug 990252 - Using the webservices API, passing in certain keys as parameters containing . and - characters are silently dropped r=glob,a=justdave
parent b4aecfef
...@@ -171,8 +171,9 @@ sub _delete_bad_keys { ...@@ -171,8 +171,9 @@ sub _delete_bad_keys {
# Making something a hash key always untaints it, in Perl. # Making something a hash key always untaints it, in Perl.
# However, we need to validate our argument names in some way. # However, we need to validate our argument names in some way.
# We know that all hash keys passed in to the WebService will # We know that all hash keys passed in to the WebService will
# match \w+, so we delete any key that doesn't match that. # match \w+, contain '.' or '-', so we delete any key that
if ($key !~ /^\w+$/) { # doesn't match that.
if ($key !~ /^[\w\.\-]+$/) {
delete $item->{$key}; delete $item->{$key};
} }
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment