Commit 39e9e3e6 authored by jouni%heikniemi.net's avatar jouni%heikniemi.net

Bug 141006: Run edit*.cgis in taint mode.

Patch by byron jones <bugzilla@glob.com.au> r=jouni, a=justdave
parent 9b2916c3
#!/usr/bin/perl -w #!/usr/bin/perl -wT
# -*- Mode: perl; indent-tabs-mode: nil -*- # -*- Mode: perl; indent-tabs-mode: nil -*-
# #
# The contents of this file are subject to the Mozilla Public # The contents of this file are subject to the Mozilla Public
......
#!/usr/bin/perl -w #!/usr/bin/perl -wT
# -*- Mode: perl; indent-tabs-mode: nil -*- # -*- Mode: perl; indent-tabs-mode: nil -*-
# #
......
#!/usr/bin/perl -w #!/usr/bin/perl -wT
# -*- Mode: perl; indent-tabs-mode: nil -*- # -*- Mode: perl; indent-tabs-mode: nil -*-
# #
# The contents of this file are subject to the Mozilla Public # The contents of this file are subject to the Mozilla Public
......
#!/usr/bin/perl -w #!/usr/bin/perl -wT
# -*- Mode: perl; indent-tabs-mode: nil -*- # -*- Mode: perl; indent-tabs-mode: nil -*-
# #
# The contents of this file are subject to the Mozilla Public # The contents of this file are subject to the Mozilla Public
......
#!/usr/bin/perl -w #!/usr/bin/perl -wT
# -*- Mode: perl; indent-tabs-mode: nil -*- # -*- Mode: perl; indent-tabs-mode: nil -*-
# #
# The contents of this file are subject to the Mozilla Public # The contents of this file are subject to the Mozilla Public
......
#!/usr/bin/perl -w #!/usr/bin/perl -wT
# -*- Mode: perl; indent-tabs-mode: nil -*- # -*- Mode: perl; indent-tabs-mode: nil -*-
# #
# The contents of this file are subject to the Mozilla Public # The contents of this file are subject to the Mozilla Public
......
...@@ -59,13 +59,8 @@ foreach my $file (@testitems) { ...@@ -59,13 +59,8 @@ foreach my $file (@testitems) {
ok(0, "$file is a module, but has a shebang"); ok(0, "$file is a module, but has a shebang");
next; next;
} elsif ($ext eq "cgi") { } elsif ($ext eq "cgi") {
# cgi files must be taint checked, but only the user-accessible # cgi files must be taint checked
# ones have been checked so far $flags = "wT";
if ($file =~ m/^edit/) {
$flags = "w";
} else {
$flags = "wT";
}
} else { } else {
ok(0, "$file has shebang but unknown extension"); ok(0, "$file has shebang but unknown extension");
next; next;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment