From 86a5040c5a91f7c3b776b243300d5415c6c58021 Mon Sep 17 00:00:00 2001 From: Curtis Poe Date: Tue, 21 May 2002 04:17:40 -0700 Subject: Re: [Patch] for problem with shellwords.pl From: "Curtis Poe" Date: Tue, 21 May 2002 11:17:40 -0700 Message-ID: <015c01c200f3$cb691670$1a01a8c0@ot.onsitetech.com> Subject: [Patch] for security problem with Text::ParseWords From: "Curtis Poe" Date: Tue, 21 May 2002 15:10:18 -0700 Message-ID: <022f01c20114$4b3c4550$1a01a8c0@ot.onsitetech.com> p4raw-id: //depot/perl@16727 --- lib/shellwords.pl | 1 + 1 file changed, 1 insertion(+) (limited to 'lib/shellwords.pl') diff --git a/lib/shellwords.pl b/lib/shellwords.pl index 1c45a5a090..ca7dc7ec23 100644 --- a/lib/shellwords.pl +++ b/lib/shellwords.pl @@ -17,6 +17,7 @@ sub shellwords { while ($_ ne '') { $field = ''; for (;;) { + use re 'taint'; # leave strings tainted if (s/^"(([^"\\]|\\.)*)"//) { ($snippet = $1) =~ s#\\(.)#$1#g; } -- cgit v1.2.1