From 938692bf09df0bce9dae7be72925bf2f1eb75dfe Mon Sep 17 00:00:00 2001 From: Koosha Khajeh Moogahi Date: Fri, 12 Oct 2012 19:51:50 +0200 Subject: [PATCH] Bug 793826: Prevent private web service methods from being called r=dkl a=LpSolit --- Bugzilla/WebService/Server.pm | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/Bugzilla/WebService/Server.pm b/Bugzilla/WebService/Server.pm index feb80e9d02..206f0c657d 100644 --- a/Bugzilla/WebService/Server.pm +++ b/Bugzilla/WebService/Server.pm @@ -25,7 +25,9 @@ use Scalar::Util qw(blessed); sub handle_login { my ($self, $class, $method, $full_method) = @_; - ThrowCodeError('unknown_method', {method => $full_method}) if !$class; + # Throw error if the supplied class does not exist or the method is private + ThrowCodeError('unknown_method', {method => $full_method}) if (!$class or $method =~ /^_/); + eval "require $class"; ThrowCodeError('unknown_method', {method => $full_method}) if $@; return if ($class->login_exempt($method) -- 2.47.3