[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: MP1 Security issue (was Re: [mp1] PerlRun fails if path_info contains special symbols)


On 3/22/07, Andy Armstrong <suppressed> wrote:
      $path_info = quotemeta $path_info;
      my $script_name = $path_info && $self->{URI} =~ /$path_info$/

You can in-line that to avoid clobbering the original:
my $script_name = $path_info && $self->{URI} =~ /\Q$path_info\E$/

- Perrin


Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.