silverstripe/silverstripe-framework — pull request #2328 by chillu (2013-08-15 20:20:22+00:00)
Title: Validate 'archiveDate' user data in Versioned 

Not a security issue as such, since the user input is sanitized
before being used in Versioned->augmentSQL(). But it shouldn't
reach the session state either, since that's commonly assumed
to be sanitized data, and it leaves unnecessary room for error.

strtotime() has fairly loose validation rules around dates,
but its a good "first line of defence".