From a28da9f20a7837b6d620235809d4f21583c23bdb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20Buclin?= Date: Thu, 7 Jan 2016 01:45:27 +0100 Subject: Addl. fix for bug 1089448: also detaint $ENV{WINDIR} on Windows --- Bugzilla.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Bugzilla.pm b/Bugzilla.pm index aa78f1483..9cb15a7ee 100644 --- a/Bugzilla.pm +++ b/Bugzilla.pm @@ -87,7 +87,7 @@ sub init_page { # On Windows, these paths are tainted, preventing # File::Spec::Win32->tmpdir from using them. But we need # a place to temporary store attachments which are uploaded. - foreach my $temp (qw(TMPDIR TMP TEMP)) { + foreach my $temp (qw(TMPDIR TMP TEMP WINDIR)) { trick_taint($ENV{$temp}) if $ENV{$temp}; } # Some DLLs used by Strawberry Perl are also in c\bin, -- cgit v1.2.1