Bug 237627: Validate dataset name in reports.cgi

patch by teemu
r=justdave
a=justdave


git-svn-id: svn://10.0.0.236/trunk@158986 18797224-902f-48f8-a5cc-f745e15eee43

mozilla/webtools/bugzilla/reports.cgi

@@ -234,7 +234,7 @@ sub chart_image_name {
     # Instead, just require that each field name consists only of letters
     # and number
 
-    if ($datasets !~ m/[A-Za-z0-9:]/) {
+    if ($datasets !~ m/^[A-Za-z0-9:]+$/) {
         die "Invalid datasets $datasets";
     }