https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8003

--- Comment #6 from Sidney Markowitz <sid...@sidney.com> ---
I'm not sure what exactly to do with the untaint PATH code in SATest.pm. There
is a "minimal PATH' in Windows that corresponds to
'/bin:/usr/bin:/usr/local/bin' but that isn't quite enough for anything to work
using Strawberry Perl. Empirically, I find that require does not find a module
if the various Strawberry binary directories are removed from PATH. But worse
than making something platform specific would be to make it platform and perl
vendor specific.

Maybe the right thing to do would be to be a bit less security conscious about
running the tests under Windows and for Windows only untaint PATH by accepting
it if it contains all absolute paths with no funny characters and no \..\

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to