|
From: Mark K. <seg...@us...> - 2002-09-26 17:46:29
|
Update of /cvsroot/formmagick/formmagick/lib/CGI
In directory usw-pr-cvs1:/tmp/cvs-serv8475/lib/CGI
Modified Files:
Tag: MITEL-0_87
FormMagick.pm Persistent.pm
Log Message:
Two patches against 0.87: one security fix that also requires a patched CGI::Persistent (the main culprit), and code to trim leading and trailing whitespace from lexicon entries.
Index: FormMagick.pm
===================================================================
RCS file: /cvsroot/formmagick/formmagick/lib/CGI/FormMagick.pm,v
retrieving revision 1.125
retrieving revision 1.125.2.1
diff -C2 -r1.125 -r1.125.2.1
*** FormMagick.pm 24 Jun 2002 18:12:20 -0000 1.125
--- FormMagick.pm 26 Sep 2002 17:46:24 -0000 1.125.2.1
***************
*** 949,953 ****
my $cgi = $fm->{cgi};
! my $fn = $cgi->param('.id');
my $po = new Persistence::Object::Simple __Fn => $fn;
--- 949,953 ----
my $cgi = $fm->{cgi};
! my $fn = join "/", ($fm->{sessiondir},$cgi->param('.id'));
my $po = new Persistence::Object::Simple __Fn => $fn;
Index: Persistent.pm
===================================================================
RCS file: /cvsroot/formmagick/formmagick/lib/CGI/Persistent.pm,v
retrieving revision 1.2
retrieving revision 1.2.2.1
diff -C2 -r1.2 -r1.2.2.1
*** Persistent.pm 21 Jan 2002 19:51:08 -0000 1.2
--- Persistent.pm 26 Sep 2002 17:46:24 -0000 1.2.2.1
***************
*** 52,56 ****
my ( $self, $param ) = @_;
! my $fn = $self->param( '.id' );
my $po = new Persistence::Object::Simple __Fn => $fn;
delete $po->{ $param }; $po->commit ();
--- 52,56 ----
my ( $self, $param ) = @_;
! my $fn = join "/", ($self->{sessiondir},$self->param( '.id' ));
my $po = new Persistence::Object::Simple __Fn => $fn;
delete $po->{ $param }; $po->commit ();
***************
*** 62,66 ****
my ( $self ) = shift;
! $fn = $self->param( '.id' );
my $po = new Persistence::Object::Simple __Fn => $fn;
$po->expire;
--- 62,66 ----
my ( $self ) = shift;
! $fn = join "/", ($self->{sessiondir},$self->param( '.id' ));
my $po = new Persistence::Object::Simple __Fn => $fn;
$po->expire;
***************
*** 100,104 ****
}
! "True Value";
=head1 NAME
--- 100,104 ----
}
! 1;
=head1 NAME
|