diff options
| -rw-r--r-- | doc/bugs/Insecure_dependency_in_eval_while_running_with_-T_switch.mdwn | 18 |
1 files changed, 17 insertions, 1 deletions
diff --git a/doc/bugs/Insecure_dependency_in_eval_while_running_with_-T_switch.mdwn b/doc/bugs/Insecure_dependency_in_eval_while_running_with_-T_switch.mdwn index bed5691f3..befda2a93 100644 --- a/doc/bugs/Insecure_dependency_in_eval_while_running_with_-T_switch.mdwn +++ b/doc/bugs/Insecure_dependency_in_eval_while_running_with_-T_switch.mdwn @@ -67,4 +67,20 @@ because `patch` command fails: Could you please fix that patch? I guess how to do it, but I don't want to break the code I distribute in my backport ;) --- Pawel
\ No newline at end of file +-- Pawel + +> It's not my patch.. IIRC my suggestion was simply to do this: --[Joey]] + + Index: IkiWiki.pm + =================================================================== + --- IkiWiki.pm (revision 3565) + +++ IkiWiki.pm (working copy) + @@ -1005,7 +1005,7 @@ + unshift @params, "location"; + } + + - my $ret=eval pagespec_translate($spec); + + my $ret=eval possibly_foolish_untaint(pagespec_translate($spec)); + return IkiWiki::FailReason->new("syntax error") if $@; + return $ret; + } #}}} |