Commit 301eb1de authored by bugreport%peshkin.net's avatar bugreport%peshkin.net

Bug 251484: Fix taint error on series create when creating a new product

r=justdave a=justdave
parent aba9ca24
......@@ -397,6 +397,11 @@ if ($action eq 'new') {
# Insert default charting queries for this product.
# If they aren't using charting, this won't do any harm.
GetVersionTable();
# $::FORM{'open_name'} and $product are sqlquoted by the series
# code and never used again here, so we can trick_taint them.
trick_taint($::FORM{'open_name'});
trick_taint($product);
my @series;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment