bug 122418 - setting attachment status fails taint checks. Just needed to

detaint after checking. r=gerv,kiko
parent a063aa36
...@@ -257,6 +257,8 @@ sub validateStatuses ...@@ -257,6 +257,8 @@ sub validateStatuses
|| DisplayError("One of the statuses you entered is not a valid status || DisplayError("One of the statuses you entered is not a valid status
for this attachment.") for this attachment.")
&& exit; && exit;
# We have tested that the status is valid, so it can be detainted
detaint_natural($status);
} }
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment