Skip Menu |

This queue is for tickets about the HTML-Scrubber CPAN distribution.

Report information
The Basics
Id: 39036
Status: resolved
Priority: 0/
Queue: HTML-Scrubber

People
Owner: Nobody in particular
Requestors: SHLOMIF [...] cpan.org
Cc:
AdminCc:

Bug Information
Severity: Normal
Broken in: 0.08
Fixed in: (no value)



Subject: Archive contains world-writable files.
{{{ shlomi:~$ tar -tvf HTML-Scrubber-0.08.tar.gz drwxrwxrwx unknown/unknown 0 2004-04-02 00:16 HTML-Scrubber-0.08 -rw-rw-rw- unknown/unknown 1557 2004-04-02 00:14 HTML-Scrubber-0.08/Changes -rw-rw-rw- unknown/unknown 20928 2003-08-24 12:35 HTML-Scrubber-0.08/LICENSE -rw-rw-rw- unknown/unknown 811 2004-03-18 16:34 HTML-Scrubber-0.08/Makefile.PL -rw-rw-rw- unknown/unknown 271 2004-03-18 15:32 HTML-Scrubber-0.08/MANIFEST -rw-rw-rw- unknown/unknown 247 2003-04-18 17:18 HTML-Scrubber-0.08/MANIFEST.SKIP -rw-rw-rw- unknown/unknown 425 2004-04-02 00:16 HTML-Scrubber-0.08/META.yml -rw-rw-rw- unknown/unknown 499 2003-10-30 05:34 HTML-Scrubber-0.08/README -rw-rw-rw- unknown/unknown 20268 2004-04-02 00:15 HTML-Scrubber-0.08/Scrubber.pm drwxrwxrwx unknown/unknown 0 2004-04-02 00:16 HTML-Scrubber-0.08/t -rw-rw-rw- unknown/unknown 286 2003-10-29 21:34 HTML-Scrubber-0.08/t/01_use.t -rw-rw-rw- unknown/unknown 4728 2003-10-29 21:59 HTML-Scrubber-0.08/t/02_basic.t -rw-rw-rw- unknown/unknown 1203 2003-10-31 09:27 HTML-Scrubber-0.08/t/03_more.t -rw-rw-rw- unknown/unknown 770 2003-10-31 09:26 HTML-Scrubber-0.08/t/04_style_script.t -rw-rw-rw- unknown/unknown 742 2003-10-31 09:26 HTML-Scrubber-0.08/t/05_pi_comment.t -rw-rw-rw- unknown/unknown 1868 2003-11-02 13:07 HTML-Scrubber-0.08/t/06_scrub_file.t -rw-rw-rw- unknown/unknown 1508 2004-04-02 00:15 HTML-Scrubber-0.08/t/07_booleans.t }}} As one can see, the files are world-writable. msec warns about them and they are a security hazard.
This will be resolved in the next release (new packaging framework will magically do it)