[whimsy] branch master updated: untaint potential host name (only used for checking purposes)

[ru...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rubys pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/whimsy.git


The following commit(s) were added to refs/heads/master by this push:
     new ac56ab0  untaint potential host name (only used for checking purposes)
ac56ab0 is described below

commit ac56ab0d1e5f7e007a3efad2fed858df43b2e18c
Author: Sam Ruby <ru...@intertwingly.net>
AuthorDate: Mon Oct 23 13:51:42 2017 -0400

    untaint potential host name (only used for checking purposes)
---
 www/test/icla/views/actions/validate.json.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/www/test/icla/views/actions/validate.json.rb b/www/test/icla/views/actions/validate.json.rb
index 92aa1b0..63b9d6c 100644
--- a/www/test/icla/views/actions/validate.json.rb
+++ b/www/test/icla/views/actions/validate.json.rb
@@ -8,7 +8,7 @@ user = ASF::Person.find(env.user)
 
 # validate email address
 begin
-  Socket.getaddrinfo(@iclaemail[/@(.*)/, 1], 'smtp')
+  Socket.getaddrinfo(@iclaemail[/@(.*)/, 1].untaint, 'smtp')
 
   if ASF::Person.find_by_email(@iclaemail)
     _error "ICLA already on file for #{@iclaemail}"

-- 
To stop receiving notification emails like this one, please contact
['"commits@whimsical.apache.org" <co...@whimsical.apache.org>'].