From 1ddfcade6ffb9417b222000a9ea682ac721a40ec Mon Sep 17 00:00:00 2001 From: Florian Pritz Date: Sun, 19 Feb 2017 19:51:35 +0100 Subject: borg-restore.pl: Untaint config file Signed-off-by: Florian Pritz --- borg-restore.pl | 1 + 1 file changed, 1 insertion(+) diff --git a/borg-restore.pl b/borg-restore.pl index 58bead1..622bec3 100755 --- a/borg-restore.pl +++ b/borg-restore.pl @@ -150,6 +150,7 @@ package Settings; ); for my $configfile (@configfiles) { + $configfile = Helper::untaint($configfile, qr/.*/); if (-e $configfile) { unless (my $return = do $configfile) { die "couldn't parse $configfile: $@" if $@; -- cgit v1.2.3-24-g4f1b