[SECURITY] Bug 219044: A user with 'editkeywords' privileges (i.e. usually an administrator) can inject arbitrary SQL via the URL used to edit an existing keyword.

Patch by Joel Peshkin <bugreport@peshkin.net>
r= justdave, zach   a= justdave


git-svn-id: svn://10.0.0.236/branches/BUGZILLA-2_16-BRANCH@148743 18797224-902f-48f8-a5cc-f745e15eee43

mozilla/webtools/bugzilla/editkeywords.cgi

@@ -123,6 +123,7 @@ unless (UserInGroup("editkeywords")) {
 
 
 my $action  = trim($::FORM{action}  || '');
+detaint_natural($::FORM{id});
 
 
 if ($action eq "") {