[cgiapp] Bug in Data::FormValidator::Results

[Bodo Schulze <suppressed>]

Hi all,

think I found a bug in _constraint_check_match() in
Data::FormValidator::Results bound into C::A via
CGI::Application::ValidateRM.

This subroutine checks the return value of user defined untainting
coderefs for false in the broad sense, not for undef. So if your field
containts the number zero and you check it using /(\d+)/, the return
value will be this number zero. _constraint_check_match interprets this
return value as false, so the check fails.

Hope, I didn't miss something obvious.

Best regards,

Bodo

---------------------------------------------------------------------
Web Archive:  http://www.mail-archive.com/suppressed/
              http://marc.theaimsgroup.com/?l=cgiapp&r=1&w=2
To unsubscribe, e-mail: suppressed
For additional commands, e-mail: suppressed