[
https://issues.apache.org/jira/browse/WHIMSY-103?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sebb updated WHIMSY-103:
------------------------
Description:
Most of the Whimsy code picks up the SVN executable from the PATH.
However acreq.cgi uses
{quote}
SVN = ("/usr/bin/svn --username #\{Shellwords.escape env.user} " +
"--password #\{Shellwords.escape env.password}").untaint
{quote}
It should use SVN from the PATH like the rest of Whimsy.
was:
Most of the Whimsy code picks up the SVN executable from the PATH.
However acreq.cgi uses
SVN = ("/usr/bin/svn --username #{Shellwords.escape env.user} " +
"--password #{Shellwords.escape env.password}").untaint
It should use SVN from the PATH like the rest of Whimsy.
> acreq.cgi does not use SVN from the PATH
> ----------------------------------------
>
> Key: WHIMSY-103
> URL: https://issues.apache.org/jira/browse/WHIMSY-103
> Project: Whimsy
> Issue Type: Bug
> Reporter: Sebb
>
> Most of the Whimsy code picks up the SVN executable from the PATH.
> However acreq.cgi uses
> {quote}
> SVN = ("/usr/bin/svn --username #\{Shellwords.escape env.user} " +
> "--password #\{Shellwords.escape env.password}").untaint
> {quote}
> It should use SVN from the PATH like the rest of Whimsy.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
