From: Rob H. <for...@us...> - 2003-02-10 07:15:30
|
Update of /cvsroot/sandweb/sandweb/lib/SandWeb/Repository In directory sc8-pr-cvs1:/tmp/cvs-serv20220/lib/SandWeb/Repository Modified Files: cvs.pm Log Message: finally got the damn quote escaping right, should be able to prevent attempts to get directly to the shell. Index: cvs.pm =================================================================== RCS file: /cvsroot/sandweb/sandweb/lib/SandWeb/Repository/cvs.pm,v retrieving revision 1.40 retrieving revision 1.41 diff -U2 -r1.40 -r1.41 --- cvs.pm 3 Feb 2003 20:56:04 -0000 1.40 +++ cvs.pm 10 Feb 2003 07:15:23 -0000 1.41 @@ -696,5 +696,5 @@ ); - push @param, " -m \'$message\'"; + push @param, " -m \\\"$message\\\""; if ($log) { $log->debug("Performing commit operation"); |