X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=cgi%2Fpkgreport.cgi;h=1ea9a17a314160b2c83314677852e8f5f6312235;hb=05f158937d8e18b9bec70594f465fc078ed3bc59;hp=1666bbc6f7191a926f516bcd29e46bde2d20b664;hpb=df064dad30005430562a9aca33ad8880ec319a31;p=debbugs.git diff --git a/cgi/pkgreport.cgi b/cgi/pkgreport.cgi index 1666bbc..1ea9a17 100755 --- a/cgi/pkgreport.cgi +++ b/cgi/pkgreport.cgi @@ -13,6 +13,12 @@ use warnings; use strict; +# Sanitize environent for taint +BEGIN{ + delete @ENV{qw(IFS CDPATH ENV BASH_ENV)}; +} + +binmode(STDOUT,':encoding(UTF-8)'); use POSIX qw(strftime nice); use Debbugs::Config qw(:globals :text :config); @@ -79,7 +85,7 @@ if (exists $param{form_options} and defined $param{form_options}) { for my $incexc (qw(include exclude)) { next unless exists $param{$incexc}; # normalize tag to tags - $param{$incexc} = [map {s/^tag:/tags:/} grep /\S\:\S/, make_list($param{$incexc})]; + $param{$incexc} = [map {s/^tag:/tags:/; $_} grep /\S\:\S/, make_list($param{$incexc})]; } for my $key (keys %package_search_keys) { next unless exists $param{key}; @@ -100,7 +106,7 @@ if (exists $param{form_options} and defined $param{form_options}) { for my $incexc (qw(include exclude)) { next unless exists $param{$incexc}; # normalize tag to tags - $param{$incexc} = [map {s/^tag:/tags:/} make_list($param{$incexc})]; + $param{$incexc} = [map {s/^tag:/tags:/; $_} make_list($param{$incexc})]; } @@ -430,6 +436,7 @@ my $result = pkg_htmlizebugs(bugs => \@bugs, (exists $param{dist})?(dist => $param{dist}):(), ); +print "Cache-Control: public, max-age=300\n"; print "Content-Type: text/html; charset=utf-8\n\n"; print "\n";