From 28ec15f1723f6d0c9bcceef8f86aa16a68b5fd93 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20Buclin?= <LpSolit@gmail.com>
Date: Sun, 27 Mar 2016 00:31:42 +0100
Subject: Bug 987742 (part 2): correctly detaint $ENV{PATH} on Strawberry Perl

---
 Bugzilla.pm | 1 +
 1 file changed, 1 insertion(+)

(limited to 'Bugzilla.pm')

diff --git a/Bugzilla.pm b/Bugzilla.pm
index 9cb15a7ee..e4772e08b 100644
--- a/Bugzilla.pm
+++ b/Bugzilla.pm
@@ -96,6 +96,7 @@ sub init_page {
                 my $c_path = $path = dirname($^X);
                 $c_path =~ s/\bperl\b(?=\\bin)/c/;
                 $path .= ";$c_path";
+                trick_taint($path);
             }
         }
         # Some environment variables are not taint safe
-- 
cgit v1.2.1