Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RT#42122 - untaint $content before using it in 'truncate' #2

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

fipp
Copy link

@fipp fipp commented Jan 16, 2015

See my post in https://rt.cpan.org/Ticket/Display.html?id=42122, posted Thu Jan 15 11:00:14 2015.

Using perl scripts in taint mode served by an Apache web servers produces warnings when the variable $content is read from:

Insecure dependency in truncate while running with -T switch at /tmp/locktest/File/NFSLock.pm line 417, <$fh> line 2.
\t(in cleanup) Insecure dependency in truncate while running with -T switch at /tmp/locktest/File/NFSLock.pm line 417, <$fh> line 2.

The merge request untaints $content before using it in 'truncate'.

@fipp fipp changed the title rt.cpan.org#42122 - untaint $content before using it in 'truncate' RT#42122 - untaint $content before using it in 'truncate' Jan 16, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant