>
> One more thing, other modules like File::Spec are affected by this as well 
> and still vulnerable.
>

Funny thing, as it turns out, File::Spec is actually the reason this 
vulnerability exists. Windows does not care about "..." for over a decade 
now, File::Spec::Win32 just replaces "..." with "..\.." to be backwards 
compatible with DOS. And since every module on CPAN uses File::Spec in some 
way or another, everything is vulnerable. :)

--
sebastian

-- 
You received this message because you are subscribed to the Google Groups 
"Mojolicious" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/mojolicious.
For more options, visit https://groups.google.com/d/optout.

Reply via email to