Page MenuHomePhorge

D25669.1737235346.diff
No OneTemporary

D25669.1737235346.diff

diff --git a/src/applications/maniphest/query/ManiphestTaskQuery.php b/src/applications/maniphest/query/ManiphestTaskQuery.php
--- a/src/applications/maniphest/query/ManiphestTaskQuery.php
+++ b/src/applications/maniphest/query/ManiphestTaskQuery.php
@@ -358,6 +358,10 @@
$where[] = $this->buildOwnerWhereClause($conn);
if ($this->taskIDs !== null) {
+ if (!ctype_digit(implode('', $this->taskIDs))) {
+ throw new PhutilSearchQueryCompilerSyntaxException(
+ pht('Task IDs must be integer numbers.'));
+ }
$where[] = qsprintf(
$conn,
'task.id in (%Ld)',

File Metadata

Mime Type
text/plain
Expires
Sat, Jan 18, 21:22 (3 h, 1 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
1113976
Default Alt Text
D25669.1737235346.diff (617 B)

Event Timeline