| Subject: | insecure dependency chdir |
| Date: | Fri, 23 Dec 2016 11:40:03 -0500 |
| To: | bug-File-Find-Rule [...] rt.cpan.org |
| From: | Jean-Philippe PIALASSE <tests [...] pialasse.com> |
when using -T switch, we obtain the following error
Insecure dependency in chdir while running with -T switch at
/usr/share/perl5/File/Find/Rule.pm line 590.
While File::Find allow to set an untaint value to untaint the values
when using the -T switch, Rule does not support this.
On line 590 we can read chdir $cwd;
this is in the sub in, and is after a loop before returning the value.
It does not seems necessary to get it there as this is the only chdir in
the module.
commenting out it seems to make the error to vanish and results are as
expected using one or more depth...