[freeside-commits] branch FREESIDE_2_3_BRANCH updated. e297233dcb54d85fc9b725dfdb4760f85df7d860

[Ivan]

The branch, FREESIDE_2_3_BRANCH has been updated
       via  e297233dcb54d85fc9b725dfdb4760f85df7d860 (commit)
      from  7e43d01d3ea88261113921836f7153d31cb006ce (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit e297233dcb54d85fc9b725dfdb4760f85df7d860
Author: Ivan Kohler <ivan at freeside.biz>
Date:   Mon Nov 12 00:02:44 2012 -0800

    fix XSS

diff --git a/FS/FS/ClientAPI/MyAccount.pm b/FS/FS/ClientAPI/MyAccount.pm
index d5fe154..bb5b47e 100644
--- a/FS/FS/ClientAPI/MyAccount.pm
+++ b/FS/FS/ClientAPI/MyAccount.pm
@@ -2004,8 +2004,8 @@ sub _usage_details {
     $p->{ending}    = $end;
   }
 
-  die "illegal beginning" if $beginning !~ /^\d*$/;
-  die "illegal ending"    if $ending    !~ /^\d*$/;
+  die "illegal beginning" if $p->{beginning} !~ /^\d*$/;
+  die "illegal ending"    if $p->{ending}    !~ /^\d*$/;
 
   my (@usage) = &$callback($svc_x, $p->{beginning}, $p->{ending}, 
     %callback_opt

-----------------------------------------------------------------------

Summary of changes:
 FS/FS/ClientAPI/MyAccount.pm |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)