borg-restore.pl: Untaint config file

Signed-off-by: Florian Pritz <bluewind@xinu.at>

1 files changed, 1 insertions, 0 deletions

diff --git a/borg-restore.pl b/borg-restore.pl
index 58bead1..622bec3 100755
--- a/borg-restore.pl
+++ b/borg-restore.pl
@@ -150,6 +150,7 @@ package Settings;
 	);
 
 	for my $configfile (@configfiles) {
+		$configfile = Helper::untaint($configfile, qr/.*/);
 		if (-e $configfile) {
 			unless (my $return = do $configfile) {
 				die "couldn't parse $configfile: $@" if $@;