Page MenuHomePhorge

D25669.1726767668.diff
No OneTemporary

D25669.1726767668.diff

diff --git a/src/applications/maniphest/query/ManiphestTaskQuery.php b/src/applications/maniphest/query/ManiphestTaskQuery.php
--- a/src/applications/maniphest/query/ManiphestTaskQuery.php
+++ b/src/applications/maniphest/query/ManiphestTaskQuery.php
@@ -358,6 +358,10 @@
$where[] = $this->buildOwnerWhereClause($conn);
if ($this->taskIDs !== null) {
+ if (!ctype_digit(implode('', $this->taskIDs))) {
+ throw new PhutilSearchQueryCompilerSyntaxException(
+ pht('Task IDs must be integer numbers.'));
+ }
$where[] = qsprintf(
$conn,
'task.id in (%Ld)',

File Metadata

Mime Type
text/plain
Expires
Thu, Sep 19, 17:41 (1 h, 27 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
892552
Default Alt Text
D25669.1726767668.diff (617 B)

Event Timeline