Bug 752751: Perl modules that start with a protocol (eg HTTP::Header) are not…

Bug 752751: Perl modules that start with a protocol (eg HTTP::Header) are not escaped correctly in SAFE_URL_REGEXP r/a=LpSolit

Bug 752751: Perl modules that start with a protocol (eg HTTP::Header) are not…
b4cf4eb6 · Simon Green · Frédéric Buclin · 631d1489 · b4cf4eb6
Commit b4cf4eb6 authored May 17, 2012 by Simon Green Committed by Frédéric Buclin May 17, 2012
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

Template.pm Bugzilla/Template.pm +1 -1

No files found.
--- a/Bugzilla/Template.pm
+++ b/Bugzilla/Template.pm
@@ -43,7 +43,7 @@ use constant FORMAT_2_SIZE => [19,55];
 # Pseudo-constant.
 sub SAFE_URL_REGEXP {
    my $safe_protocols = join('|', SAFE_PROTOCOLS);
-    return qr/($safe_protocols):[^\s<>\"]+[\w\/]/i;
+    return qr/($safe_protocols):[^:\s<>\"][^\s<>\"]+[\w\/]/i;
 }

 # Convert the constants in the Bugzilla::Constants and Bugzilla::WebService::Constants