oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Remove the use trace line from Paginator.t. It's not used.

Browse source 
Yet again, fix a security hole in the Include macro.  If the path used a symlink
then it would bypass one of the three security checks.
This commit is contained in:
Colin Kuskie 2006-07-30 18:10:31 +00:00
parent 78c33c54ff
commit d154726bc1
2 changed files with 1 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/WebGUI/Macro/Include.pm
View file

@ -40,7 +40,7 @@ sub process {
my (@param, $temp, $file);
@param = @_;
my $i18n = WebGUI::International->new($session,'Macro_Include');
if ($param[0] =~ /passwd/i || $param[0] =~ /shadow/i || $param[0] =~ m!WebGUI/etc/\w+\.conf!i) {
if ($param[0] =~ /passwd/i || $param[0] =~ /shadow/i || $param[0] =~ m!/etc/\w+\.conf!i) {
return $i18n->get('security');
}
$file = FileHandle->new($param[0],"r");

1
t/Paginator.t
View file

@ -9,7 +9,6 @@
#-------------------------------------------------------------------
use FindBin;
use trace;
use strict;
use lib "$FindBin::Bin/lib";