Bug.pm: Ensure severities are valid before passing them to SQL

Spotted by Tim Deegan

diff --git a/Emesinae/Bug.pm b/Emesinae/Bug.pm
index 270f9ea50893eefec2e41bec5aa360d681ce47f2..21decc999473dcded282578e77449c8699abe41f 100644 (file)
--- a/Emesinae/Bug.pm
+++ b/Emesinae/Bug.pm
@@ -193,6 +193,7 @@ sub listall ($$;%) {
     elsif ( $args{State} eq "Closed" ) { push @where, qq(open = "false" ) }
 
     if ( $args{Severities} ) {
+        map { assert_valid_severity($_) } @ { $args{Severities} };
         push @where,
           join( " OR ", map { qq{severity = "$_"} } @{ $args{Severities} } );
     }