aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFrédéric Buclin <LpSolit@gmail.com>2012-11-13 18:53:55 +0100
committerFrédéric Buclin <LpSolit@gmail.com>2012-11-13 18:53:55 +0100
commitaecf0a17d1689d957bc8854e55e499839798446f (patch)
tree8fa84413d8d053e609b5e4b192011f99808b01de /report.cgi
parentBug 808845 (CVE-2012-5475): [SECURITY] Security vulnerability in YUI's swfsto... (diff)
downloadbugzilla-aecf0a17d1689d957bc8854e55e499839798446f.tar.gz
bugzilla-aecf0a17d1689d957bc8854e55e499839798446f.tar.bz2
bugzilla-aecf0a17d1689d957bc8854e55e499839798446f.zip
Bug 790296 (CVE-2012-4189): [SECURITY] Field values are not escaped correctly in tabular reports
r=dkl a=LpSolit
Diffstat (limited to 'report.cgi')
-rwxr-xr-xreport.cgi2
1 files changed, 1 insertions, 1 deletions
diff --git a/report.cgi b/report.cgi
index de587f143..e70dcf4b2 100755
--- a/report.cgi
+++ b/report.cgi
@@ -387,5 +387,5 @@ sub get_field_restrictions {
my $field = shift;
my $cgi = Bugzilla->cgi;
- return join('&', map {"$field=$_"} $cgi->param($field));
+ return join('&amp;', map {url_quote($field) . '=' . url_quote($_)} $cgi->param($field));
}