• Do not register here on develop.twiki.org, login with your twiki.org account.
• Use View topic Item7848 for generic doc work for TWiki-6.1.1. Use View topic Item7851 for doc work on extensions that are not part of a release. More... Close
• Anything you create or change in standard webs (Main, TWiki, Sandbox etc) will be automatically reverted on every SVN update.
Does this site look broken?. Use the LitterTray web for test cases.

Item5994: Secure configure script with taint mode turned on

Item Form Data

AppliesTo: Component: Priority: CurrentState: WaitingFor: TargetRelease ReleasedIn
Engine   Urgent Closed   patch 4.3.0

Edit Form Data

Reported By:
Applies To:
Current State:
Waiting For:
Target Release:
Released In:


cos its less secure without.

And while we're at it, remove the files from the logos dir and replace them with inline css images.

-- TWiki:Main/SvenDowideit - 11 Sep 2008

Is anyone doing this within the next few days for 4.2.4 or is this a 5.0 release blocker. I agree that at least for 5.0 this should be done. But better if we can do it for 4.2.4.

-- TWiki:Main.KennethLavrsen - 18 Sep 2008

I'll see what I can do...

-- TWiki:Main.OlivierRaginel - 29 Sep 2008

Sorry, didn't had much time lately, and had troubles with my development installation. So I guess for 4.2.4 it's too late, but I'll try and do it anyway.

-- TWiki:Main.OlivierRaginel - 10 Oct 2008

I enabled taint mode and fixed the (minor, safe) problems it showed up. Note that I was forced to default $ENV{PATH} to the value of same when configure is first run. However I think the risk of this causing problems is extremely small.

-- TWiki:Main.CrawfordCurrie - 12 Oct 2008

This was marked as an urgent bug for 4.2.4. But the fix was only checked into trunk - ie 5.0

It that a mistake or ??

-- TWiki:Main.KennethLavrsen - 13 Oct 2008

Oh, forgot I was supposed to merge. Don't have a 4.2.4 checkout here, will get to it eventually.


Reverted the merge, cos I merged to the tag instead of the branch. D'oh!

Finally got it right

-- TWiki:Main.CrawfordCurrie - 16 Oct 2008

Summary Secure configure script with taint mode turned on
ReportedBy TWiki:Main.SvenDowideit
Codebase ~twiki4
SVN Range TWiki-5.0.0, Mon, 18 Aug 2008, build 17431
AppliesTo Engine

Priority Urgent
CurrentState Closed

Checkins TWikirev:17605 TWikirev:17606 TWikirev:17611 TWikirev:17654 TWikirev:17657 TWikirev:17658
TargetRelease patch
ReleasedIn 4.3.0
Edit | Attach | Watch | Print version | History: r23 < r22 < r21 < r20 < r19 | Backlinks | Raw View |  Raw edit | More topic actions
Topic revision: r23 - 2009-04-08 - PeterThoeny
This site is powered by the TWiki collaboration platform Powered by PerlCopyright © 2008-2023 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback