perl-libwww-perl/lwp-untaint.patch
2008-09-22 07:06:38 +00:00

14 lines
483 B
Diff

diff --git a/lib/HTTP/Message.pm b/lib/HTTP/Message.pm
index 12acdfa..4c15fb2 100644
--- a/lib/HTTP/Message.pm
+++ b/lib/HTTP/Message.pm
@@ -404,7 +404,7 @@ sub _stale_content {
# delegate all other method calls the the _headers object.
sub AUTOLOAD
{
- my $method = substr($AUTOLOAD, rindex($AUTOLOAD, '::')+2);
+ my ($method) = ($AUTOLOAD =~ /^.*::(.+)$/); # untaint
return if $method eq "DESTROY";
# We create the function here so that it will not need to be