This is an automated email from the git hooks/post-receive script.
ntyni pushed a commit to branch master
in repository libcgi-expand-perl.
commit 7c8e8388735ac51b48f4a461769318e924072db4
Author: Niko Tyni <nt...@debian.org>
Date: Sat Jul 4 23:29:40 2015 +0300
Disable warning about CGI::param called in list context
The code explicitly handles param() returning multiple values,
disarming the parameter injection vulnerability.
Closes: #791439
---
...ning-about-CGI-param-called-in-list-conte.patch | 29 ++++++++++++++++++++++
debian/patches/series | 1 +
2 files changed, 30 insertions(+)
diff --git
a/debian/patches/0001-Disable-warning-about-CGI-param-called-in-list-conte.patch
b/debian/patches/0001-Disable-warning-about-CGI-param-called-in-list-conte.patch
new file mode 100644
index 0000000..8985b1d
--- /dev/null
+++
b/debian/patches/0001-Disable-warning-about-CGI-param-called-in-list-conte.patch
@@ -0,0 +1,29 @@
+From 310aea92aaa91fbcba353591bfd68b13b8b183a4 Mon Sep 17 00:00:00 2001
+From: Niko Tyni <nt...@debian.org>
+Date: Sat, 4 Jul 2015 23:29:40 +0300
+Subject: [PATCH] Disable warning about CGI::param called in list context
+
+The code explicitly handles param() returning multiple values,
+disarming the parameter injection vulnerability.
+
+Bug-Debian: https://bugs.debian.org/791439
+---
+ Expand.pm | 2 ++
+ 1 file changed, 2 insertions(+)
+
+diff --git a/Expand.pm b/Expand.pm
+index eb85850..e6be854 100644
+--- a/Expand.pm
++++ b/Expand.pm
+@@ -62,6 +62,8 @@ sub expand_cgi {
+
+ # permit multiple values CGI style
+ for ($cgi->param) {
++ # multiple values are explicitly handled
++ local $CGI::LIST_CONTEXT_WARN = 0;
+ next if (/\.[xy]$/); # img_submit=val & img_submit.x=20 -> clash
+ my @vals = $cgi->param($_);
+ $args{$_} = @vals > 1 ? \@vals : $vals[0];
+--
+2.5.1
+
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..08862ac
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1 @@
+0001-Disable-warning-about-CGI-param-called-in-list-conte.patch
--
Alioth's /usr/local/bin/git-commit-notice on
/srv/git.debian.org/git/pkg-perl/packages/libcgi-expand-perl.git
_______________________________________________
Pkg-perl-cvs-commits mailing list
Pkg-perl-cvs-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-perl-cvs-commits
