Re: [TWiki-Dev] [SVN] r4130 - twiki/branches/DEVELOP/lib/TWiki/UI

[Will N. <wbn...@gm...>]

dunno.  martin ?

On 4/27/05, Michael Daum <mi...@na...> wrote:
> On Wednesday 27 April 2005 04:56, Wil...@nt... wrote:
> > Author: WillNorris
> > Date: 2005-04-26 19:56:45 -0700 (Tue, 26 Apr 2005)
> > New Revision: 4130
> >
> > Modified:
> >    twiki/branches/DEVELOP/lib/TWiki/UI/Register.pm
> > Log:
> > RegisterCgiScriptRewrite: fixed tainting problem encountered on action=
=3Dverify
> >      my $file =3D $tmpDir . "/$code";
> > +    $file =3D TWiki::Sandbox::untaintUnchecked( $file );
> >      return $file;
>=20
> Shouldn't this be
>=20
> $file =3D TWiki::Sandbox::normalizeFileName( $file );
>=20
> ???
>=20
>         Micha.
>=20
> --
> -- Michael Daum
> -- Natural Language Systems
> -- Department of Informatics
> ---University of Hamburg
> -- http://nats-www.informatik.uni-hamburg.de/MichaelDaum
>=20
>=20
>