Bommels05/Mozilla
Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bug 518404: Make email_in.pl run in taint mode

Browse Source 
Patch by Vitaliy Filippov <vitalif@yourcmc.ru> r=mkanat, a=mkanat


git-svn-id: svn://10.0.0.236/trunk@258841 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
mkanat%bugzilla.org 2009-11-02 14:50:18 +00:00
parent e8f1d2ee62
commit 0ffa552193
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
mozilla/webtools/bugzilla/email_in.pl
View File

@ -1,4 +1,4 @@
#!/usr/bin/perl -w
#!/usr/bin/perl -wT
# -*- Mode: perl; indent-tabs-mode: nil -*-
#
# The contents of this file are subject to the Mozilla Public
@ -26,7 +26,11 @@ use warnings;
# run from this one so that it can find its modules.
use Cwd qw(abs_path);
use File::Basename qw(dirname);
BEGIN { chdir dirname(abs_path($0)); }
BEGIN {
# Untaint the abs_path.
my ($a) = abs_path($0) =~ /^(.*)$/;
chdir dirname($a);
}
use lib qw(. lib);
@ -503,7 +507,7 @@ normal Bugzilla interface. So, for example, you cannot reassign
a bug and change its status at the same time.
The email interface only accepts emails that are correctly formatted
perl RFC2822. If you send it an incorrectly formatted message, it
per RFC2822. If you send it an incorrectly formatted message, it
may behave in an unpredictable fashion.
You cannot send an HTML mail along with attachments. If you do, Bugzilla