Skip to content

bugzilla
bugzilla
Commit b4cf4eb6 authored by Simon Green's avatar Simon Green Committed by Frédéric Buclin
Browse files
Options

Bug 752751: Perl modules that start with a protocol (eg HTTP::Header) are not…

Bug 752751: Perl modules that start with a protocol (eg HTTP::Header) are not escaped correctly in SAFE_URL_REGEXP r/a=LpSolit
parent 631d1489
Show whitespace changes
Inline Side-by-side
Showing with 1 addition and 1 deletion
Bugzilla/Template.pm
View file @ b4cf4eb6
...@@ -43,7 +43,7 @@ use constant FORMAT_2_SIZE => [19,55]; ...@@ -43,7 +43,7 @@ use constant FORMAT_2_SIZE => [19,55];
# Pseudo-constant. # Pseudo-constant.
sub SAFE_URL_REGEXP { sub SAFE_URL_REGEXP {
my $safe_protocols = join('|', SAFE_PROTOCOLS); my $safe_protocols = join('|', SAFE_PROTOCOLS);
return qr/($safe_protocols):[^\s<>\"]+[\w\/]/i; return qr/($safe_protocols):[^:\s<>\"][^\s<>\"]+[\w\/]/i;
} }
# Convert the constants in the Bugzilla::Constants and Bugzilla::WebService::Constants # Convert the constants in the Bugzilla::Constants and Bugzilla::WebService::Constants
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment