summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFrédéric Buclin <LpSolit@gmail.com>2016-03-27 00:30:17 +0100
committerFrédéric Buclin <LpSolit@gmail.com>2016-03-27 00:30:17 +0100
commita6562e03893e2d6f3c5719f4cc36e53067277959 (patch)
treeda2e766eb8a12e12128e7617a88b292abd7880e5
parent3a98ba42227bd0782fb19b041057cd8dc88576d3 (diff)
downloadbugzilla-a6562e03893e2d6f3c5719f4cc36e53067277959.tar.gz
bugzilla-a6562e03893e2d6f3c5719f4cc36e53067277959.tar.xz
Bug 987742 (part 2): correctly detaint $ENV{PATH} on Strawberry Perl
-rw-r--r--Bugzilla.pm1
1 files changed, 1 insertions, 0 deletions
diff --git a/Bugzilla.pm b/Bugzilla.pm
index fba6d2a04..64cf15bb6 100644
--- a/Bugzilla.pm
+++ b/Bugzilla.pm
@@ -99,6 +99,7 @@ sub init_page {
my $c_path = $path = dirname($^X);
$c_path =~ s/\bperl\b(?=\\bin)/c/;
$path .= ";$c_path";
+ trick_taint($path);
}
}
# Some environment variables are not taint safe