Remove .. from the path - taint doesn't like that

nigelhorne · Mar 13, 2024 · 7cd2423 · 7cd2423
1 parent 9f97be5
commit 7cd2423
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/bin/testcgibin b/bin/testcgibin
@@ -7,7 +7,9 @@ use autodie qw(:all);
 use FindBin qw($Bin);
 use lib "$Bin/../lib";
 
-$ENV{'root_dir'} = "$Bin/..";
+my $path = $Bin;
+$path =~ s/^(.+)\/.+/$1/;	# Remove the final directory, probably "/bin"
+$ENV{'root_dir'} = $path;
 
 eval {
 	my $testnumber = $ARGV[0];