From b8a1ef47857a0217ab92ac1d4206f48383f08f55 Mon Sep 17 00:00:00 2001
From: Frédéric Buclin <LpSolit@gmail.com>
Date: Fri, 25 Sep 2015 20:33:38 +0200
Subject: Bug 1089448: Strawberry Perl throws a "Insecure dependency in
 sysopen" error when attaching a file r=gerv

---
 Bugzilla.pm | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'Bugzilla.pm')

diff --git a/Bugzilla.pm b/Bugzilla.pm
index 21b086cbd..b53eef0a7 100644
--- a/Bugzilla.pm
+++ b/Bugzilla.pm
@@ -87,6 +87,14 @@ sub init_page {
         # Some modules throw undefined errors (notably File::Spec::Win32) if
         # PATH is undefined.
         $ENV{'PATH'} = '';
+        # On Windows, these paths are tainted, preventing File::Spec::Win32->tmpdir
+        # from using them. But we need a place to temporary store attachments
+        # which are uploaded.
+        if (ON_WINDOWS) {
+            foreach my $temp (qw(TMPDIR TMP TEMP)) {
+                trick_taint($ENV{$temp}) if $ENV{$temp};
+            }
+        }
     }
 
     # Because this function is run live from perl "use" commands of
-- 
cgit v1.2.3-24-g4f1b