Please improve input validation in Narro

[GoogleCodeExporter]

Issue:
We'd like to bring Narro back online on Mozilla servers; in the security review 
we carried out for this, we found a number of issues which, while now resolved, 
may not have been exploitable had Narro been more strict on validating input.

As it's entirely possible there are more issues, we'd love to see the input 
validation improved.

Remediation:
Please ensure that, where possible, the application checks that the type, the 
size and the format of input is valid.  For more information on this, please 
consult the Mozilla Secure Coding Guidelines: 
https://wiki.mozilla.org/WebAppSec/Secure_Coding_Guidelines#Input_Validation

Thanks

Original issue reported on code.google.com by [email protected] on 2 May 2012 at 8:49