aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorlpsolit%gmail.com <>2005-11-10 07:40:50 +0000
committerlpsolit%gmail.com <>2005-11-10 07:40:50 +0000
commitd18833467afdeaea11fe0deae3495e36dca209e0 (patch)
tree2c4f1b4eb70b18c5b52792ba305bae9eb05e575e
parent3832c3c2aee08ae7f1b447a19ac106a306542fe4 (diff)
downloadbugs-d18833467afdeaea11fe0deae3495e36dca209e0.tar
bugs-d18833467afdeaea11fe0deae3495e36dca209e0.tar.gz
bugs-d18833467afdeaea11fe0deae3495e36dca209e0.tar.bz2
bugs-d18833467afdeaea11fe0deae3495e36dca209e0.tar.xz
bugs-d18833467afdeaea11fe0deae3495e36dca209e0.zip
Bug 314919: [PostgreSQL] "Find a Specific Bug" using Pg fails - Patch by Frédéric Buclin <LpSolit@gmail.com> r=joel a=myk
-rw-r--r--Bugzilla/DB.pm3
1 files changed, 3 insertions, 0 deletions
diff --git a/Bugzilla/DB.pm b/Bugzilla/DB.pm
index 263f545af..f031637d5 100644
--- a/Bugzilla/DB.pm
+++ b/Bugzilla/DB.pm
@@ -272,6 +272,9 @@ sub sql_fulltext_search {
# in LIKE search clauses
@words = map($self->quote("%$_%"), @words);
+ # untaint words, since they are safe to use now that we've quoted them
+ map(trick_taint($_), @words);
+
# turn the words into a set of LIKE search clauses
@words = map("LOWER($column) LIKE $_", @words);