Re: MP1 Security issue (was Re: [mp1] PerlRun fails if path_info contains special symbols)

["Philip M. Gollucci" <suppressed>]

Perrin Harkins wrote:
> On 3/22/07, Andy Armstrong <suppressed> wrote:
> >       $path_info = quotemeta $path_info;
> >       my $script_name = $path_info && $self->{URI} =~ /$path_info$/
>
> You can in-line that to avoid clobbering the original:
> my $script_name = $path_info && $self->{URI} =~ /\Q$path_info\E$/
+1 from me.

I guess we should start planning for a 1.30 and 2.0.4 once this is 
agreed and committed ?

--
------------------------------------------------------------------------
Philip M. Gollucci (suppressed) 323.219.4708
Consultant / http://p6m7g8.net/Resume/resume.shtml
Senior Software Engineer - TicketMaster - http://ticketmaster.com
1024D/EC88A0BF 0DE5 C55C 6BF3 B235 2DAB  B89E 1324 9B4F EC88 A0BF

Work like you don't need the money,
love like you'll never get hurt,
and dance like nobody's watching.