diff options
| author | Jakub Narebski <jnareb@gmail.com> | 2006-08-05 13:15:24 +0200 |
|---|---|---|
| committer | Junio C Hamano <junkio@cox.net> | 2006-08-06 01:59:36 -0700 |
| commit | e2860ead31579a15ee94831f2b9b55e43caa2cac (patch) | |
| tree | c03f301448f541b5f3816b7949f9066ba54df4f0 | |
| parent | cac4bd94fb6d5f3066614051827669476a9f0b56 (diff) | |
| download | git-e2860ead31579a15ee94831f2b9b55e43caa2cac.tar.gz git-e2860ead31579a15ee94831f2b9b55e43caa2cac.tar.xz | |
gitweb: No error messages with unescaped/unprotected user input
Signed-off-by: Jakub Narebski <jnareb@gmail.com>
Signed-off-by: Junio C Hamano <junkio@cox.net>
| -rwxr-xr-x | gitweb/gitweb.perl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/gitweb/gitweb.perl b/gitweb/gitweb.perl index 628490145..2e2629ca5 100755 --- a/gitweb/gitweb.perl +++ b/gitweb/gitweb.perl @@ -1265,7 +1265,7 @@ sub git_diff_print { sub git_project_list { my $order = $cgi->param('o'); if (defined $order && $order !~ m/project|descr|owner|age/) { - die_error(undef, "Invalid order parameter '$order'"); + die_error(undef, "Unknown order parameter"); } my @list = git_read_projects(); |