Subject: [PATCH 7/9] gitweb: No error messages with unescaped/unprotected user input

From: Jakub Narebski <[email-masked]>
Date: Sat, 05 Aug 2006 13:15:24 +0200

Signed-off-by: Jakub Narebski <[email-masked]>
---
Probably some error messages with unescaped user input are left...

 gitweb/gitweb.perl |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/gitweb/gitweb.perl b/gitweb/gitweb.perl
index d8ba016..013bfe7 100755
--- a/gitweb/gitweb.perl
+++ b/gitweb/gitweb.perl
@@ -1265,7 +1265,7 @@ ## actions
 sub git_project_list {
        my $order = $cgi->param('o');
        if (defined $order && $order !~ m/project|descr|owner|age/) {
-               die_error(undef, "Invalid order parameter '$order'");
+               die_error(undef, "Unknown order parameter");
        }
 
        my @list = git_read_projects();
-- 
1.4.1.1