[freeside-commits] branch master updated. f9060f8300336b1fc792602a56308e883c27f3aa

Ivan ivan at 420.am
Mon Nov 12 00:02:43 PST 2012


The branch, master has been updated
       via  f9060f8300336b1fc792602a56308e883c27f3aa (commit)
      from  3d18177c158acc492e9322677b11c8089df0fbc0 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit f9060f8300336b1fc792602a56308e883c27f3aa
Author: Ivan Kohler <ivan at freeside.biz>
Date:   Mon Nov 12 00:02:42 2012 -0800

    fix XSS

diff --git a/FS/FS/ClientAPI/MyAccount.pm b/FS/FS/ClientAPI/MyAccount.pm
index d07b383..3364b97 100644
--- a/FS/FS/ClientAPI/MyAccount.pm
+++ b/FS/FS/ClientAPI/MyAccount.pm
@@ -2037,8 +2037,8 @@ sub _usage_details {
     $p->{ending}    = $end;
   }
 
-  die "illegal beginning" if $beginning !~ /^\d*$/;
-  die "illegal ending"    if $ending    !~ /^\d*$/;
+  die "illegal beginning" if $p->{beginning} !~ /^\d*$/;
+  die "illegal ending"    if $p->{ending}    !~ /^\d*$/;
 
   my (@usage) = &$callback($svc_x, $p->{beginning}, $p->{ending}, 
     %callback_opt

-----------------------------------------------------------------------

Summary of changes:
 FS/FS/ClientAPI/MyAccount.pm |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)




More information about the freeside-commits mailing list