Skip to content

bugzilla
bugzilla
Commit c04fc5cc authored by justdave%syndicomm.com's avatar justdave%syndicomm.com
Browse files
Options

Fix for bug 38859: escape invalid email addresses for HTML before displaying to the user.

Patch by Myk Melez <myk@mozilla.org> r= jake@acutex.net, justdave@syndicomm.com
parent 0776fda7
Hide whitespace changes
Inline Side-by-side
Showing with 3 additions and 0 deletions
CGI.pl
View file @ c04fc5cc
......@@ -593,6 +593,9 @@ sub CheckEmailSyntax {
if ($addr !~ /$match/) {
print "Content-type: text/html\n\n";
# For security, escape HTML special characters.
$addr = html_quote($addr);
PutHeader("Check e-mail syntax");
print "The e-mail address you entered\n";
print "(<b>$addr</b>) didn't match our minimal\n";
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment