aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorlpsolit%gmail.com <>2006-02-21 07:40:56 +0000
committerlpsolit%gmail.com <>2006-02-21 07:40:56 +0000
commitbaa5111f805cc51288e9dd82a89cbeb39425ec3a (patch)
treebabe64cd95a45fde02d3247b645ba4407cb13933
parentFix the link to the security advisories for 2.18.4 and 2.18.5. r=LpSolit (diff)
downloadbugzilla-baa5111f805cc51288e9dd82a89cbeb39425ec3a.tar.gz
bugzilla-baa5111f805cc51288e9dd82a89cbeb39425ec3a.tar.bz2
bugzilla-baa5111f805cc51288e9dd82a89cbeb39425ec3a.zip
[SECURITY] Bug 312498: editparams.cgi doesn't check whether 'whinedays' and 'mostfreqthreshold' are numeric - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=justdave
-rw-r--r--defparams.pl6
1 files changed, 4 insertions, 2 deletions
diff --git a/defparams.pl b/defparams.pl
index 5f709c43e..f8e1776a7 100644
--- a/defparams.pl
+++ b/defparams.pl
@@ -480,7 +480,8 @@ sub find_languages {
'If you have a large database and this page takes a long time to ' .
'load, try increasing this number.',
type => 't',
- default => '2'
+ default => '2',
+ checker => \&check_numeric
},
{
@@ -574,7 +575,8 @@ Configure bugmail: %urlbase%userprefs.cgi?tab=email
state before our cronjob will whine at the owner.<br>
Set to 0 to disable whining.},
type => 't',
- default => 7
+ default => 7,
+ checker => \&check_numeric
},
{