aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFrédéric Buclin <LpSolit@gmail.com>2016-03-27 00:31:42 +0100
committerFrédéric Buclin <LpSolit@gmail.com>2016-03-27 00:31:42 +0100
commit28ec15f1723f6d0c9bcceef8f86aa16a68b5fd93 (patch)
tree98d0801d1ca8dafade61f6beadc2c4e88a904095
parent6896e0469c6d9fd22252e2959da8bacb5ca99aa9 (diff)
downloadbugs-28ec15f1723f6d0c9bcceef8f86aa16a68b5fd93.tar
bugs-28ec15f1723f6d0c9bcceef8f86aa16a68b5fd93.tar.gz
bugs-28ec15f1723f6d0c9bcceef8f86aa16a68b5fd93.tar.bz2
bugs-28ec15f1723f6d0c9bcceef8f86aa16a68b5fd93.tar.xz
bugs-28ec15f1723f6d0c9bcceef8f86aa16a68b5fd93.zip
Bug 987742 (part 2): correctly detaint $ENV{PATH} on Strawberry Perl
-rw-r--r--Bugzilla.pm1
1 files changed, 1 insertions, 0 deletions
diff --git a/Bugzilla.pm b/Bugzilla.pm
index 9cb15a7ee..e4772e08b 100644
--- a/Bugzilla.pm
+++ b/Bugzilla.pm
@@ -96,6 +96,7 @@ sub init_page {
my $c_path = $path = dirname($^X);
$c_path =~ s/\bperl\b(?=\\bin)/c/;
$path .= ";$c_path";
+ trick_taint($path);
}
}
# Some environment variables are not taint safe