Re: MP1 Security issue (was Re: [mp1] PerlRun fails if path_info contains special symbols)

[Perrin Harkins]

On 3/22/07, Andy Armstrong <[EMAIL PROTECTED]> wrote:

      $path_info = quotemeta $path_info;
      my $script_name = $path_info && $self->{URI} =~ /$path_info$/

You can in-line that to avoid clobbering the original:
my $script_name = $path_info && $self->{URI} =~ /\Q$path_info\E$/

- Perrin