summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDylan William Hardison <dylan@hardison.net>2018-05-04 21:41:39 +0200
committerGitHub <noreply@github.com>2018-05-04 21:41:39 +0200
commit779252b143809c134aae82333e8456b566b054be (patch)
tree2475d5b5f8c4935e4848f3eb567b346bec139bf8
parent32783c128899521fafe0f6b6b915255082f318ed (diff)
downloadbugzilla-779252b143809c134aae82333e8456b566b054be.tar.gz
bugzilla-779252b143809c134aae82333e8456b566b054be.tar.xz
no bug - untaint default values in localconfig
-rw-r--r--Bugzilla/Install/Localconfig.pm1
1 files changed, 1 insertions, 0 deletions
diff --git a/Bugzilla/Install/Localconfig.pm b/Bugzilla/Install/Localconfig.pm
index 7a913358c..55394bc2e 100644
--- a/Bugzilla/Install/Localconfig.pm
+++ b/Bugzilla/Install/Localconfig.pm
@@ -211,6 +211,7 @@ sub _read_localconfig_from_env {
else {
my $default = $var->{default};
$localconfig{$name} = ref($default) eq 'CODE' ? $default->() : $default;
+ untaint($localconfig{$name});
}
}