Skip to content

Commit 5525ca3

Browse files
committed
Remove HTML::Parser from what is shared to PG.
`HTML::Parser` was shared into the safe compartment, and its `parse_file` method opens and reads whatever path it is given, bypassing the permitted_read_dir restriction. Thus giving any PG problem arbitrary file read. It is not actually used by PG, and so that is removed from the modules that are shared. Note that the `HTML::Entities` package which is part of the `HTML::Parser` package on CPAN is still shared and is used.
1 parent a03bcf8 commit 5525ca3

1 file changed

Lines changed: 0 additions & 1 deletion

File tree

conf/defaults.config

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1222,7 +1222,6 @@ $pg{specialPGEnvironmentVars}{problemPostamble} = { TeX => '', HTML => '' };
12221222
${pg}{modules} = [
12231223
[qw(Encode)],
12241224
[qw(Encode::Encoding)],
1225-
[qw(HTML::Parser)],
12261225
[qw(HTML::Entities)],
12271226
[qw(Encode)],
12281227
[qw(Exporter )],

0 commit comments

Comments
 (0)