From 8482e69b2e36af353705a84e4465668f7431dddf Mon Sep 17 00:00:00 2001 From: Moritz Bunkus Date: Fri, 11 May 2007 12:26:24 +0000 Subject: [PATCH] $form->parse_template() verwendet $form->{OUT} direkt oder indirekt in open(). Deswegen $form->{OUT} definitiv nur aus sicheren bzw. bereinigten Strings aufbauen. --- bin/mozilla/cp.pl | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/bin/mozilla/cp.pl b/bin/mozilla/cp.pl index b68865a4f..c7b85c60a 100644 --- a/bin/mozilla/cp.pl +++ b/bin/mozilla/cp.pl @@ -695,11 +695,13 @@ sub print { $form->{pdf} = 1; } + delete $form->{OUT}; + if ($form->{media} eq 'printer') { $form->{OUT} = "| $myconfig{printer}"; } if ($form->{media} eq 'queue') { - %queued = split / /, $form->{queued}; + %queued = map { s|.*/|| } split / /, $form->{queued}; if ($filename = $queued{ $form->{formname} }) { unlink "$spool/$filename"; -- 2.20.1