diff options
author | Frédéric Buclin <LpSolit@gmail.com> | 2015-09-25 20:33:38 +0200 |
---|---|---|
committer | Frédéric Buclin <LpSolit@gmail.com> | 2015-09-25 20:33:38 +0200 |
commit | b8a1ef47857a0217ab92ac1d4206f48383f08f55 (patch) | |
tree | 00b779c04c294e0b3caf4005d84bc64a242c2f76 /Bugzilla.pm | |
parent | b92f32dd334617e74ab931c1db1801cf1c2897ba (diff) | |
download | bugzilla-b8a1ef47857a0217ab92ac1d4206f48383f08f55.tar.gz bugzilla-b8a1ef47857a0217ab92ac1d4206f48383f08f55.tar.xz |
Bug 1089448: Strawberry Perl throws a "Insecure dependency in sysopen" error when attaching a file
r=gerv
Diffstat (limited to 'Bugzilla.pm')
-rw-r--r-- | Bugzilla.pm | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/Bugzilla.pm b/Bugzilla.pm index 21b086cbd..b53eef0a7 100644 --- a/Bugzilla.pm +++ b/Bugzilla.pm @@ -87,6 +87,14 @@ sub init_page { # Some modules throw undefined errors (notably File::Spec::Win32) if # PATH is undefined. $ENV{'PATH'} = ''; + # On Windows, these paths are tainted, preventing File::Spec::Win32->tmpdir + # from using them. But we need a place to temporary store attachments + # which are uploaded. + if (ON_WINDOWS) { + foreach my $temp (qw(TMPDIR TMP TEMP)) { + trick_taint($ENV{$temp}) if $ENV{$temp}; + } + } } # Because this function is run live from perl "use" commands of |