From: Eric Wong <e@80x24.org>
Date: Tue, 4 Jun 2019 02:04:29 +0000 (+0000)
Subject: config: do not accept non-ASCII digits in cgitrc params
X-Git-Tag: v1.2.0~196^2~13
X-Git-Url: http://www.git.stargrave.org/?p=public-inbox.git;a=commitdiff_plain;h=63636d78c9c1aba31c4141460b0012ffee96ff53

config: do not accept non-ASCII digits in cgitrc params

cgit uses atoi(3), and now we can retain compatibility.
---

diff --git a/lib/PublicInbox/Config.pm b/lib/PublicInbox/Config.pm
index 09f9179b..6e85750a 100644
--- a/lib/PublicInbox/Config.pm
+++ b/lib/PublicInbox/Config.pm
@@ -307,7 +307,7 @@ sub parse_cgitrc {
 			}
 		} elsif (m!\Ainclude=(.+)\z!) {
 			parse_cgitrc($self, $1, $nesting + 1);
-		} elsif (m!\A(scan-hidden-path|remove-suffix)=(\d+)\z!) {
+		} elsif (m!\A(scan-hidden-path|remove-suffix)=([0-9]+)\z!) {
 			my ($k, $v) = ($1, $2);
 			$k =~ tr/-/_/;
 			$self->{"-cgit_$k"} = $v;