Blacklisting ':' in actions

git-svn-id: https://ledger-smb.svn.sourceforge.net/svnroot/ledger-smb/branches/1.2@928 4979c152-3d1c-0410-bac9-87ea11338e46

1 files changed, 4 insertions, 0 deletions

diff --git a/LedgerSMB/Form.pm b/LedgerSMB/Form.pm
index ad9b2d86..745708e3 100755
--- a/LedgerSMB/Form.pm
+++ b/LedgerSMB/Form.pm
@@ -76,6 +76,10 @@ sub new {
 
 	bless $self, $type;
 
+	if ($self->{action} =~ /:/){
+		$self->error("Access Denied");
+	}
+	$self;
 }