Bug#1083186: cdimage.debian.org: Perl warning for find_file.cgi
Philipp Kern <[email protected]>
| Newsgroups | gmane.linux.debian.devel.cd |
|---|---|
| Message-ID | <d4bbf769-7595-499d-a882-9dce971fc4d4__144.706531294503$1727901225$gmane$org@debian.org> |
Package: cdimage.debian.org X-Debbugs-Cc: [email protected] Hi, In cgi-grnet-01's Apache error log I found this: > CGI::param called in list context from /srv/cdimage-search.debian.org/cgi-bin/find_file.cgi line 316, this can lead to vulnerabilities. See the warning in "Fetching the value or values of a single named parameter" at /usr/share/perl5/CGI.pm line 414. That's printed on every invocation of the script, so it'd be good to fix it. It is not invoked super often, but a clean error log would be better. :) Kind regards and thanks Philipp Kern
OpenPGP_signature.asc
(application/pgp-signature, 488 B)
-----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEPzuChCNsw7gPxr3/RG4lRTXQVuwFAmb9pgkACgkQRG4lRTXQ VuxUnQgAqYsALpN9+AT7iwAvFucdBLfnaxt8PIqD9FA4cQ9DgAch45Xl/B0Kr85D yhWwmgXJqHlweN343YNwIyMtr1IhW3Raw27gfMCEei7Hhk7nU7Nelc/K40c4J4o7 j2Sy5T3h53Xvk1aUAWfAbME0UMvWq28rspUr7jcqEFRZs7gDesR4WJWukE9ZSaEG XjkQHcFFKJaimRkN6cgvvjRcBjvyNNzL1olykFTkHixzSdzatCcSfO/tkZOZhrfD KxF3CMs88saILMtBflvdyJzvslwIDQ3GWL+lx+UzLeBp0zL+Yu6T9dVcDN4G2Iw7 2AfjEbjbw6QIdamU9r94ikWHKXKhFw== =wJez -----END PGP SIGNATURE-----