| Commit message (Expand) | Author | Age |
|---|
| * | pm_filter: use \Q...\E to escape all possible strings pedantically•••The current implementation would misbehave for prefixes containing
a single quote.
| Simon McVittie | 2016-09-03 |
| * | Use single-quotes in $installdir value in case prefix includes a string metac... | Sam Hathaway | 2016-08-03 |
| * | Exclude working directory from library path (CVE-2016-1238)•••Current Perl versions put '.' at the end of the library search path
@INC, although this will be fixed in a future Perl release. This means
that when software loads an optionally-present module, it will be
looked for in the current working directory before giving up. An
attacker could use this to execute arbitrary Perl code from ikiwiki's
current working directory.
Removing '.' from the library search path in Perl is the correct
fix for this vulnerability, but is not trivial to do due to
backwards-compatibility concerns. Mitigate this (even if ikiwiki is run
with a vulnerable Perl version) by explicitly removing '.' from the
search path, and instead looking for ikiwiki's own modules relative
to the absolute path of the executable when run from the source
directory.
In tests that specifically want to use the current working directory,
use "-I".getcwd instead of "-I." so we use its absolute path, which
is immune to the removal of ".".
| Simon McVittie | 2016-07-28 |
| * | Squelch regex deprecation warnings from Perl 5.22.•••Specifically:
"Unescaped left brace in regex is deprecated, passed through in regex"
| Amitai Schlair | 2015-06-14 |
| * | remove -T from ikiwiki.in, add back if NOTAINT=0 | Joey Hess | 2009-05-22 |
| * | typo | Joey Hess | 2009-02-04 |
| * | export installdir•••For use by Setup/Automator
| Joey Hess | 2009-01-12 |
| * | If PERL5LIB is set to the libdir when building ikiwiki, calculate and hardco... | Joey Hess | 2008-05-14 |
| * | use an elsif•••(Not that it really matters..)
| Joey Hess | 2008-04-28 |
| * | Deal with different paths to perl when removing -T flag. | Joey Hess | 2008-04-28 |
| * | Add PREFIX/bin to the hardcoded PATH within ikiwiki. | Joey Hess | 2008-04-28 |
| * | if NOTAINT is not set, disable tainting | Joey Hess | 2008-02-24 |
| * | * Allow setting NOTAINT=1 when building the wiki to remove taint checking••• flags, which can be useful on some hosting providers.
| joey | 2007-02-20 |
| * | * Rename ikiwiki.pl so MakeMaker doesn't see it, and install it.•••* Add some code to the build system that tries to determine if the
lib installation directory is in @INC. If it's not, munge ikiwiki
to hardcode the path to the lib directory. This should allow installing
ikiwiki in nonstandard locations, including home directories, by just
setting PREFIX at build time.
* Fix nested examples directory in deb.
| joey | 2006-11-20 |
| * | * Use DESTDIR and not PREFIX to specify installation prefix for packaging.•••* Support running "perl Makefile.PL PREFIX=foo" to build ikiwiki to run
from a different directory.
| joey | 2006-08-25 |