aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorjustdave%syndicomm.com <>2003-04-25 04:15:44 +0000
committerjustdave%syndicomm.com <>2003-04-25 04:15:44 +0000
commitc53aa58d7f85cd4508edd4de09d34f7baa5762ee (patch)
treee2dad4a2288c77fc460bf10b40303ef3860e9c0d /checksetup.pl
parentBug 194394: Someone listed as QA contact on a bug could still access a bug wi... (diff)
downloadbugzilla-c53aa58d7f85cd4508edd4de09d34f7baa5762ee.tar.gz
bugzilla-c53aa58d7f85cd4508edd4de09d34f7baa5762ee.tar.bz2
bugzilla-c53aa58d7f85cd4508edd4de09d34f7baa5762ee.zip
Bug 197153: Fix for insecure temporary filename handling.
Patch by Brad Baetz <bbaetz@acm.org> r= justdave, gerv a= justdave
Diffstat (limited to 'checksetup.pl')
-rwxr-xr-xchecksetup.pl11
1 files changed, 7 insertions, 4 deletions
diff --git a/checksetup.pl b/checksetup.pl
index d86c12b2a..b23ca76a6 100755
--- a/checksetup.pl
+++ b/checksetup.pl
@@ -204,6 +204,10 @@ my $modules = [
version => '0.82'
},
{
+ name => 'File::Temp',
+ version => '0'
+ },
+ {
name => 'Template',
version => '2.07'
},
@@ -813,14 +817,13 @@ END
# Restrict access to .dot files to the public webdot server at research.att.com
# if research.att.com ever changed their IP, or if you use a different
# webdot server, you'll need to edit this
-<FilesMatch ^[0-9]+\.dot$>
+<FilesMatch \.dot$>
Allow from 192.20.225.10
Deny from all
</FilesMatch>
-# Allow access by a local copy of 'dot' to .png, .gif, .jpg, and
-# .map files
-<FilesMatch ^[0-9]+\.(png|gif|jpg|map)$>
+# Allow access to .png files created by a local copy of 'dot'
+<FilesMatch \.png$>
Allow from all
</FilesMatch>