Remove PATH overriding code in ikiwiki script that was present to make perl taint...

diff --git a/debian/changelog b/debian/changelog
index 430bd302c69800f476e390d26d2b4da15b3faee3..a9892938a07c4744f569f2b07fbe2fd7b39b0697 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,6 +3,8 @@ ikiwiki (3.20100832) UNRELEASED; urgency=low
   * needsbuild hook interface changed; the hooks should now return
     the modified array of things that need built. (Backwards compatability
     code keeps plugins using the old interface working.)
   * needsbuild hook interface changed; the hooks should now return
     the modified array of things that need built. (Backwards compatability
     code keeps plugins using the old interface working.)

+  * Remove PATH overriding code in ikiwiki script that was present to make
+    perl taint checking happy, but taint checking is disabled.

 
  -- Joey Hess <joeyh@debian.org>  Tue, 07 Sep 2010 12:08:05 -0400
 
 
  -- Joey Hess <joeyh@debian.org>  Tue, 07 Sep 2010 12:08:05 -0400
 

diff --git a/doc/bugs/ikiwiki_ignores_PATH_environment.mdwn b/doc/bugs/ikiwiki_ignores_PATH_environment.mdwn
index 63ac4bc31e0df74229d50173c6693315e48d299c..5097acaef5c2de5fe74208ee8436f59f2a282351 100644 (file)
--- a/doc/bugs/ikiwiki_ignores_PATH_environment.mdwn
+++ b/doc/bugs/ikiwiki_ignores_PATH_environment.mdwn
@@ -7,3 +7,12 @@ This makes it a little hard to specify which specific binaries should be used, e
     $ENV{PATH}="$ENV{PATH}:/usr/local/bin:/usr/bin:/bin:/opt/local/bin";
 
 ? The alternative is of course to patch ikiwiki as suggested in the bug, but I wanted to ask here first :)
     $ENV{PATH}="$ENV{PATH}:/usr/local/bin:/usr/bin:/bin:/opt/local/bin";
 
 ? The alternative is of course to patch ikiwiki as suggested in the bug, but I wanted to ask here first :)

+
+> You can use the ENV setting in your setup file to set any environment
+> variables you like. Since ikiwiki.cgi is run by the web browser, that
+> is the best way to ensure ikiwiki always runs with a given variable set.
+> 
+> As a suid program, the ikiwiki wrappers have to sanitize the environment.
+> The ikiwiki script's own sanitization of PATH was done to make perl taint
+> checking happy, but as taint checking is disabled anyway, I have removed
+> that. [[done]] --[[Joey]] 

diff --git a/ikiwiki.in b/ikiwiki.in
index bcda2469b515c33a8df91536da895f28841574b3..339efd37c3ab8655746bff66c4610924936a4c87 100755 (executable)
--- a/ikiwiki.in
+++ b/ikiwiki.in
@@ -1,7 +1,4 @@
 #!/usr/bin/perl
 #!/usr/bin/perl

-$ENV{PATH}="/usr/local/bin:/usr/bin:/bin";
-delete @ENV{qw{IFS CDPATH ENV BASH_ENV}};
-

 package IkiWiki;
 
 use warnings;
 package IkiWiki;
 
 use warnings;