You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by mm...@apache.org on 2007/09/13 15:23:57 UTC
svn commit: r575307 -
/spamassassin/trunk/lib/Mail/SpamAssassin/AutoWhitelist.pm
Author: mmartinec
Date: Thu Sep 13 06:23:57 2007
New Revision: 575307
URL: http://svn.apache.org/viewvc?rev=575307&view=rev
Log:
fix Insecure depenedency in AutoWhitelist.pm
Modified:
spamassassin/trunk/lib/Mail/SpamAssassin/AutoWhitelist.pm
Modified: spamassassin/trunk/lib/Mail/SpamAssassin/AutoWhitelist.pm
URL: http://svn.apache.org/viewvc/spamassassin/trunk/lib/Mail/SpamAssassin/AutoWhitelist.pm?rev=575307&r1=575306&r2=575307&view=diff
==============================================================================
--- spamassassin/trunk/lib/Mail/SpamAssassin/AutoWhitelist.pm (original)
+++ spamassassin/trunk/lib/Mail/SpamAssassin/AutoWhitelist.pm Thu Sep 13 06:23:57 2007
@@ -75,7 +75,7 @@
else {
my $type = $main->{conf}->{auto_whitelist_factory};
if ($type =~ /^([_A-Za-z0-9:]+)$/) {
- $type = $1;
+ $type = Mail::SpamAssassin::Util::untaint_var($type);
eval '
require '.$type.';
$factory = '.$type.'->new();