Re: [WWdevel] [WWcvs] pg: SECURITY: tighter constraints on which macro files can be loaded without restriction.

[Davide P. C. <dp...@un...>]

> Log Message:
> -----------
> SECURITY: tighter constraints on which macro files can be loaded  
> without
> restriction. Previously, any file that *contained* the strings PG.pl,
> dangerousMacros.pl, or IO.pl would be loaded with an empty opmask.
>
...
>  			my $unrestricted_files  = "PG.pl|dangerousMacros.pl|IO.pl";
> -			if ($fileName =~ /$unrestricted_files/) {
> +			if ($fileName =~ /^$unrestricted_files$/) {

Sam, I don't think this quite does it.  I think you need

		if ($fileName =~ /^($unrestricted_files)$/) {

otherwise, the ^ only goes with PG.pl and the $ only with IO.pl.  (I  
think.)

Davide