Commit 5525ca3
committed
Remove
`HTML::Parser` was shared into the safe compartment, and its
`parse_file` method opens and reads whatever path it is given, bypassing
the permitted_read_dir restriction. Thus giving any PG problem arbitrary
file read. It is not actually used by PG, and so that is removed from
the modules that are shared. Note that the `HTML::Entities` package
which is part of the `HTML::Parser` package on CPAN is still shared and
is used.HTML::Parser from what is shared to PG.1 parent a03bcf8 commit 5525ca3
1 file changed
Lines changed: 0 additions & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1222 | 1222 | | |
1223 | 1223 | | |
1224 | 1224 | | |
1225 | | - | |
1226 | 1225 | | |
1227 | 1226 | | |
1228 | 1227 | | |
| |||
0 commit comments