diff options
| author |   Robin H. Johnson <robbat2@gentoo.org> | 2018-03-05 13:46:41 -0800 |
|---|---|---|
| committer | Robin H. Johnson <robbat2@gentoo.org> | 2018-03-05 13:46:41 -0800 |
| commit | 6ce7c3e8fdd27a40a8e9afe25360f8163c4a9371 (patch) | |
| tree | 4ab4eddb3b1278a32fd41d591e235986df46fd74 /Bugzilla | |
| parent | buglist: tell taint check that bugid is safe. (diff) | |
| download | bugzilla-6ce7c3e8fdd27a40a8e9afe25360f8163c4a9371.tar.gz bugzilla-6ce7c3e8fdd27a40a8e9afe25360f8163c4a9371.tar.bz2 bugzilla-6ce7c3e8fdd27a40a8e9afe25360f8163c4a9371.zip | |
Bugzilla/Search: force validation of timestamp/date.
Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
Diffstat (limited to 'Bugzilla')
| -rw-r--r-- | Bugzilla/Search.pm | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/Bugzilla/Search.pm b/Bugzilla/Search.pm index 646f949f5..0694dd98c 100644 --- a/Bugzilla/Search.pm +++ b/Bugzilla/Search.pm @@ -2169,7 +2169,9 @@ sub _timestamp_translate { my $value = $args->{value}; my $dbh = Bugzilla->dbh; - return if $value !~ /^(?:[\+\-]?\d+[hdwmy]s?|now)$/i; + # Force parsing of all dates & times, so that we filter weird values out + # from users. + #return if $value !~ /^(?:[\+\-]?\d+[hdwmy]s?|now)$/i; $value = SqlifyDate($value); # By default, the time is appended to the date, which we don't always want. |