This is an automated email from the git hooks/post-receive script. ntyni pushed a commit to branch master in repository libcgi-expand-perl.
commit 7c8e8388735ac51b48f4a461769318e924072db4 Author: Niko Tyni <nt...@debian.org> Date: Sat Jul 4 23:29:40 2015 +0300 Disable warning about CGI::param called in list context The code explicitly handles param() returning multiple values, disarming the parameter injection vulnerability. Closes: #791439 --- ...ning-about-CGI-param-called-in-list-conte.patch | 29 ++++++++++++++++++++++ debian/patches/series | 1 + 2 files changed, 30 insertions(+) diff --git a/debian/patches/0001-Disable-warning-about-CGI-param-called-in-list-conte.patch b/debian/patches/0001-Disable-warning-about-CGI-param-called-in-list-conte.patch new file mode 100644 index 0000000..8985b1d --- /dev/null +++ b/debian/patches/0001-Disable-warning-about-CGI-param-called-in-list-conte.patch @@ -0,0 +1,29 @@ +From 310aea92aaa91fbcba353591bfd68b13b8b183a4 Mon Sep 17 00:00:00 2001 +From: Niko Tyni <nt...@debian.org> +Date: Sat, 4 Jul 2015 23:29:40 +0300 +Subject: [PATCH] Disable warning about CGI::param called in list context + +The code explicitly handles param() returning multiple values, +disarming the parameter injection vulnerability. + +Bug-Debian: https://bugs.debian.org/791439 +--- + Expand.pm | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/Expand.pm b/Expand.pm +index eb85850..e6be854 100644 +--- a/Expand.pm ++++ b/Expand.pm +@@ -62,6 +62,8 @@ sub expand_cgi { + + # permit multiple values CGI style + for ($cgi->param) { ++ # multiple values are explicitly handled ++ local $CGI::LIST_CONTEXT_WARN = 0; + next if (/\.[xy]$/); # img_submit=val & img_submit.x=20 -> clash + my @vals = $cgi->param($_); + $args{$_} = @vals > 1 ? \@vals : $vals[0]; +-- +2.5.1 + diff --git a/debian/patches/series b/debian/patches/series new file mode 100644 index 0000000..08862ac --- /dev/null +++ b/debian/patches/series @@ -0,0 +1 @@ +0001-Disable-warning-about-CGI-param-called-in-list-conte.patch -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libcgi-expand-perl.git _______________________________________________ Pkg-perl-cvs-commits mailing list Pkg-perl-cvs-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-perl-cvs-commits