On Thu, 5 Jun 2014, sri wrote: > And you've missed the actual solution which is mentioned later in that > thread. > > https://groups.google.com/forum/#!msg/mojolicious/JBRLsmY72MU/EIIUcsoVmbkJ
This is the only patch I find I need with recent Mojolicious for use with setuid perl scripts: --- Mojolicious-4.91/lib/Mojo/Template.pm.orig 2014-03-14 19:58:22.000000000 -0400 +++ Mojolicious-4.91/lib/Mojo/Template.pm 2014-03-31 19:39:49.000000000 -0400 @@ -93,6 +93,8 @@ # Compile with line directive return undef unless my $code = $self->code; + # Workaround for use in taint check mode + use Taint::Util; untaint $code; my $compiled = eval $self->_wrap($code); $self->compiled($compiled) and return undef unless $@; And the same could be done without the dependency using a regex untain. -- You received this message because you are subscribed to the Google Groups "Mojolicious" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/mojolicious. For more options, visit https://groups.google.com/d/optout.
