Bug: GetRevision() is Tainted on Windows
In RcsWrap.pm, function getRevision, the Windows code path is not taint proof. Error message: unsafe unlink for $tmpfile and $tmpRevFile
Test case
Click "diff" on any page
Environment
| TWiki version: |
01 Feb 2003 |
| TWiki plugins: |
gnuskin |
| Server OS: |
Windows XP SP1 |
| Web server: |
IIS |
| Perl version: |
ActiveState perl 5.6 |
| Client OS: |
Windows XP SP1 |
| Web Browser: |
IE 6.0 |
--
MartinKuhne - 19 Jun 2003
Follow up
Fix record