diff options
| author | joey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071> | 2007-04-22 17:45:39 +0000 |
|---|---|---|
| committer | joey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071> | 2007-04-22 17:45:39 +0000 |
| commit | 1e62d2bc0c3c5ff0ab52dfdfe82c8abbcb5b6c3a (patch) | |
| tree | a346848f012ec54678a814bbf344c05d20caecf0 /IkiWiki/Rcs/mercurial.pm | |
| parent | bad02f285615b839c3f4bfba6ac0638c73f4b57c (diff) | |
* In mercurial backend, untaint ipaddr when using it as the user for the
commit. Thanks, Alexander Wirt. Closes: #420428
Diffstat (limited to 'IkiWiki/Rcs/mercurial.pm')
| -rw-r--r-- | IkiWiki/Rcs/mercurial.pm | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/IkiWiki/Rcs/mercurial.pm b/IkiWiki/Rcs/mercurial.pm index 84bf99c68..2e15085ec 100644 --- a/IkiWiki/Rcs/mercurial.pm +++ b/IkiWiki/Rcs/mercurial.pm @@ -72,7 +72,7 @@ sub rcs_commit ($$$;$$) { #{{{ $user = possibly_foolish_untaint($user); } elsif (defined $ipaddr) { - $user = "Anonymous from $ipaddr"; + $user = "Anonymous from ".possibly_foolish_untaint($ipaddr); } else { $user = "Anonymous"; |