marc 99/10/08 22:00:09
Modified: . bugdb.cgi
Log:
Add [ and ] to allowed characters. Some more work is required to make
full regexes work, but this is a reasonable solution for now.
Revision Changes Path
1.45 +1 -1 apache-site/bugdb.cgi
Index: bugdb.cgi
===================================================================
RCS file: /export/home/cvs/apache-site/bugdb.cgi,v
retrieving revision 1.44
retrieving revision 1.45
diff -u -r1.44 -r1.45
--- bugdb.cgi 1999/10/08 23:40:06 1.44
+++ bugdb.cgi 1999/10/09 05:00:07 1.45
@@ -373,7 +373,7 @@
sub check_unsafe
{
local($str) = $_[0];
- unless($str =~ /[EMAIL PROTECTED] ]+$/) {
+ unless($str =~ /[EMAIL PROTECTED] ]+$/) {
print "<FONT COLOR=\"red\">INVALID INPUT: $str</FONT>\n";
die("$0: invalid character (breakin attempt?) in \"$str\"");
}