untaint cwd when constructing full perl file path
authorGraham Knop <haarg@haarg.org>
Mon, 27 Feb 2017 10:01:24 +0000 (11:01 +0100)
committerGraham Knop <haarg@haarg.org>
Mon, 27 Feb 2017 10:01:24 +0000 (11:01 +0100)
commit273db69d2f04dc29880dab6e45d59e25c3c3f1b3
treeb5318ffa39535098a22b5ad7d67379fcdaab1341
parent82410e22b11e82191fa54ba974cdaac68a8c5454
untaint cwd when constructing full perl file path

Previously, we would load perl files using a possibly relative path,
which would work based on . being in @INC.  Now that . is being removed,
we need to use an absolute path (or ./ relative path).  When
absolutizing, cwd would be used, which can be tained.  Although loading
based on . in @INC violates the spirit of taint, it had previously
worked and a downstream module expected it.  Untaint the cwd that gets
used so we can load relative paths under taint mode.
lib/Config/Any/Perl.pm
t/perl-taint.t [new file with mode: 0644]