external/aurweb
0
0
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/aurweb.git synced 2025-02-03 10:43:03 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Sanitize merge base name in pkgreq_file()

Browse source 
Move the check introduced in 06b7099 (Validate package base name when
filing requests, 2014-07-02) from pkgbase.php to pkgreq_file().

Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
This commit is contained in:
Lukas Fleischer 2014-07-03 10:32:31 +02:00
parent 87215cef00
commit b113764b0b
2 changed files with 5 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
web/lib/pkgreqfuncs.inc.php
View file

@ -72,6 +72,10 @@ function pkgreq_file($ids, $type, $merge_into, $comments) {
global $AUR_LOCATION;
global $AUR_REQUEST_ML;
if (!empty($merge_into) && !preg_match("/^[a-z0-9][a-z0-9\.+_-]*$/", $merge_into)) {
return array(false, __("Invalid name: only lowercase letters are allowed."));
}
if (empty($comments)) {
return array(false, __("The comment field must not be empty."));
}