Commit 51bfafc7 authored by bugreport%peshkin.net's avatar bugreport%peshkin.net

Bug 237627: Validate dataset name in reports.cgi

patch by teemu r=justdave a=justdave
parent bbf84c2e
......@@ -234,7 +234,7 @@ sub chart_image_name {
# Instead, just require that each field name consists only of letters
# and number
if ($datasets !~ m/[A-Za-z0-9:]/) {
if ($datasets !~ m/^[A-Za-z0-9:]+$/) {
die "Invalid datasets $datasets";
}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment