| Subject: | Error opening files with pipes in name |
The open method being used in this package is very vulnerable to awkward
file names that can lead to code injection if you are not careful. It
may be rare but when filenames have pipes for example, the text
following the pipe is executed as a shell command. If you filename is
"example=|ls|", ls is executed in the shell. In order to fix this, I
changed the open calls to use the 3-argument for of open. Attached is
the MimeInfo class with the new open calls. I also modified the new
method to actually return the blessed reference of the object.
| Subject: | MimeInfo.pm |
Message body is not shown because it is too large.