Validate date filters values.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6264 e93f8b46-1217-0410-a6f0-8f06a7374b81

app/models/query.rb

@@ -176,6 +176,13 @@ class Query < ActiveRecord::Base
           errors.add(label_for(field), :invalid) if values_for(field).detect {|v| v.present? && !v.match(/^\d+$/) }
         when :float 
           errors.add(label_for(field), :invalid) if values_for(field).detect {|v| v.present? && !v.match(/^\d+(\.\d*)?$/) }
+        when :date, :date_past
+          case operator_for(field)
+          when "=", ">=", "<=", "><"
+            errors.add(label_for(field), :invalid) if values_for(field).detect {|v| v.present? && !v.match(/^\d{4}-\d{2}-\d{2}$/) }
+          when ">t-", "<t-", "t-"
+            errors.add(label_for(field), :invalid) if values_for(field).detect {|v| v.present? && !v.match(/^\d+$/) }
+          end
         end
       end
       

test/unit/query_test.rb

@@ -171,6 +171,22 @@ class QueryTest < ActiveSupport::TestCase
     find_issues_with_query(query)
   end
   
+  def test_date_filter_should_not_accept_non_date_values
+    query = Query.new(:name => '_')
+    query.add_filter('created_on', '=', ['a'])
+    
+    assert query.has_filter?('created_on')
+    assert !query.valid?
+  end
+  
+  def test_relative_date_filter_should_not_accept_non_integer_values
+    query = Query.new(:name => '_')
+    query.add_filter('created_on', '>t-', ['a'])
+    
+    assert query.has_filter?('created_on')
+    assert !query.valid?
+  end
+
   def test_operator_date_equals
     query = Query.new(:name => '_')
     query.add_filter('due_date', '=', ['2011-07-10'])