aboutsummaryrefslogtreecommitdiff
path: root/pm_filter
Commit message (Collapse)AuthorAge
* pm_filter: use \Q...\E to escape all possible strings pedanticallySimon McVittie2016-09-03
| | | | | The current implementation would misbehave for prefixes containing a single quote.
* Use single-quotes in $installdir value in case prefix includes a string ↵Sam Hathaway2016-08-03
| | | | metacharacter.
* Exclude working directory from library path (CVE-2016-1238)Simon McVittie2016-07-28
| | | | | | | | | | | | | | | | | | | | | Current Perl versions put '.' at the end of the library search path @INC, although this will be fixed in a future Perl release. This means that when software loads an optionally-present module, it will be looked for in the current working directory before giving up. An attacker could use this to execute arbitrary Perl code from ikiwiki's current working directory. Removing '.' from the library search path in Perl is the correct fix for this vulnerability, but is not trivial to do due to backwards-compatibility concerns. Mitigate this (even if ikiwiki is run with a vulnerable Perl version) by explicitly removing '.' from the search path, and instead looking for ikiwiki's own modules relative to the absolute path of the executable when run from the source directory. In tests that specifically want to use the current working directory, use "-I".getcwd instead of "-I." so we use its absolute path, which is immune to the removal of ".".
* Squelch regex deprecation warnings from Perl 5.22.Amitai Schlair2015-06-14
| | | | | | Specifically: "Unescaped left brace in regex is deprecated, passed through in regex"
* remove -T from ikiwiki.in, add back if NOTAINT=0Joey Hess2009-05-22
|
* typoJoey Hess2009-02-04
|
* export installdirJoey Hess2009-01-12
| | | | For use by Setup/Automator
* If PERL5LIB is set to the libdir when building ikiwiki, calculate and ↵Joey Hess2008-05-14
| | | | hardcode a proper 'use lib' statement anyway. This fixes a gotcha, since PERL5LIB won't work once ikiwiki is running via a wrapper or as a cgi.
* use an elsifJoey Hess2008-04-28
| | | | (Not that it really matters..)
* Deal with different paths to perl when removing -T flag.Joey Hess2008-04-28
|
* Add PREFIX/bin to the hardcoded PATH within ikiwiki.Joey Hess2008-04-28
|
* if NOTAINT is not set, disable taintingJoey Hess2008-02-24
|
* * Allow setting NOTAINT=1 when building the wiki to remove taint checkingjoey2007-02-20
| | | | flags, which can be useful on some hosting providers.
* * Rename ikiwiki.pl so MakeMaker doesn't see it, and install it.joey2006-11-20
| | | | | | | | | * Add some code to the build system that tries to determine if the lib installation directory is in @INC. If it's not, munge ikiwiki to hardcode the path to the lib directory. This should allow installing ikiwiki in nonstandard locations, including home directories, by just setting PREFIX at build time. * Fix nested examples directory in deb.
* * Use DESTDIR and not PREFIX to specify installation prefix for packaging.joey2006-08-25
* Support running "perl Makefile.PL PREFIX=foo" to build ikiwiki to run from a different directory.
generated by cgit v1.2.3 (git 2.45.0) at 2024-11-22 04:03:40 +0000