From: Jakub Narebski <jnareb@gmail.com>
Date: Sat, 05 Aug 2006 11:15:24 GMT
Subject: [PATCH 7/9] gitweb: No error messages with unescaped/unprotected user input
Message-ID: <eb1uj0$8ti$3@sea.gmane.org>
In-Reply-To: <44d47813.36251c31.2553.3cf7@mx.gmail.com>

Signed-off-by: Jakub Narebski <jnareb@gmail.com>
---
Probably some error messages with unescaped user input are left...

 gitweb/gitweb.perl |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/gitweb/gitweb.perl b/gitweb/gitweb.perl
index d8ba016..013bfe7 100755
--- a/gitweb/gitweb.perl
+++ b/gitweb/gitweb.perl
@@ -1265,7 +1265,7 @@ ## actions
 sub git_project_list {
        my $order = $cgi->param('o');
        if (defined $order && $order !~ m/project|descr|owner|age/) {
-               die_error(undef, "Invalid order parameter '$order'");
+               die_error(undef, "Unknown order parameter");
        }
 
        my @list = git_read_projects();
-- 
1.4.1.1