michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-05-04 22:30:33 +01:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Un-taint mdir before adding to @INC https://sourceforge.net/tracker/index.php?func=detail&aid=3558014&group_id=17457&atid=117457#

Browse Source
This commit is contained in:
Jamie Cameron
2012-08-15 13:29:35 -07:00
parent 9be227b327
commit 47d5cd0586
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
web-lib-funcs.pl
View File

@@ -3285,6 +3285,8 @@ foreach my $f (@files) {
}
my @OLDINC = @INC;
my $mdir = &module_root_directory($mod);
$mdir =~ /^(.*)$/; # untaint, part 1
$mdir = $1; # untaint, part 2
@INC = &unique($mdir, @INC);
-d $mdir || &error("Module $mod does not exist");
if (!&get_module_name() && $mod) {