summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--doc/bugs/Insecure_dependency_in_eval_while_running_with_-T_switch.mdwn18
1 files changed, 17 insertions, 1 deletions
diff --git a/doc/bugs/Insecure_dependency_in_eval_while_running_with_-T_switch.mdwn b/doc/bugs/Insecure_dependency_in_eval_while_running_with_-T_switch.mdwn
index bed5691f3..befda2a93 100644
--- a/doc/bugs/Insecure_dependency_in_eval_while_running_with_-T_switch.mdwn
+++ b/doc/bugs/Insecure_dependency_in_eval_while_running_with_-T_switch.mdwn
@@ -67,4 +67,20 @@ because `patch` command fails:
Could you please fix that patch? I guess how to do it, but I don't want
to break the code I distribute in my backport ;)
--- Pawel \ No newline at end of file
+-- Pawel
+
+> It's not my patch.. IIRC my suggestion was simply to do this: --[Joey]]
+
+ Index: IkiWiki.pm
+ ===================================================================
+ --- IkiWiki.pm (revision 3565)
+ +++ IkiWiki.pm (working copy)
+ @@ -1005,7 +1005,7 @@
+ unshift @params, "location";
+ }
+
+ - my $ret=eval pagespec_translate($spec);
+ + my $ret=eval possibly_foolish_untaint(pagespec_translate($spec));
+ return IkiWiki::FailReason->new("syntax error") if $@;
+ return $ret;
+ } #}}}