aboutsummaryrefslogtreecommitdiff
path: root/doc/bugs/img_plugin_causes_taint_failure.mdwn
diff options
context:
space:
mode:
Diffstat (limited to 'doc/bugs/img_plugin_causes_taint_failure.mdwn')
-rw-r--r--doc/bugs/img_plugin_causes_taint_failure.mdwn20
1 files changed, 20 insertions, 0 deletions
diff --git a/doc/bugs/img_plugin_causes_taint_failure.mdwn b/doc/bugs/img_plugin_causes_taint_failure.mdwn
new file mode 100644
index 000000000..14de17557
--- /dev/null
+++ b/doc/bugs/img_plugin_causes_taint_failure.mdwn
@@ -0,0 +1,20 @@
+The img plugin causes a taint failure if one tries to link a scaled image, e.g.
+
+ \[[!img foo.png size=64x64]]
+
+ .ikiwiki.setup: Insecure dependency in mkdir while running with -T switch at /usr/lib/perl5/vendor_perl/5.8.8/IkiWiki.pm line 360.
+ BEGIN failed--compilation aborted at (eval 5) line 109.
+
+If one omits the size argument it works. And if it worked once the taint failure will not happen again unless one rm -r's the destdir.
+
+Seen with ikiwiki 2.30
+
+> And what version of perl? See [[Insecure_dependency_in_mkdir]] et al.
+> Also, the debian build of ikiwiki has taint checking disabled to avoid
+> this perl bug. Did you build your own? Set NOTAINT=1 when building..
+> --[[Joey]]
+
+>> perl-5.8.8, I've created a package for openSUSE. Will file perl bug there as well then.
+
+I've gone ahead and turned off taint checking by default now.
+[[done]]