[SECURITY] editparams.cgi doesn't check whether 'whinedays' and 'mostfreqthreshold...

diff --git a/Bugzilla/Config/MTA.pm b/Bugzilla/Config/MTA.pm
index 61569e2d3e47fe119f6631876820b979d5be42f3..50aa8c85d212aa059d0319daacaca199f5ee2135 100644 (file)
--- a/Bugzilla/Config/MTA.pm
+++ b/Bugzilla/Config/MTA.pm
@@ -104,7 +104,8 @@ Configure bugmail: %urlbase%userprefs.cgi?tab=email
   {
    name => 'whinedays',
    type => 't',
-   default => 7
+   default => 7,
+   checker => \&check_numeric
   },
 
   {

diff --git a/Bugzilla/Config/Query.pm b/Bugzilla/Config/Query.pm
index b86339fc912b4dc2d2ff8f22f5781fc3434c1c2e..e3996a0eef1287655e17db1442efacfbf1a7216f 100644 (file)
--- a/Bugzilla/Config/Query.pm
+++ b/Bugzilla/Config/Query.pm
@@ -51,7 +51,8 @@ sub get_param_list {
   {
    name => 'mostfreqthreshold',
    type => 't',
-   default => '2'
+   default => '2',
+   checker => \&check_numeric
   },
 
   {