On Thu, Oct 27, 2005 at 10:05:37AM +1300, Srdjan wrote:
> sendmail command and params are not constructed in a taint-safe fashion.
> Arguments to send_by_sendmail() are used/filled in rather than having
> separate vars set to defaults or untainted args.
Hi,
I disagree: it's not the job of send_
Hi Niko,
That's probably me not being precise. I was actually referring to setting '-f'
argument from the 'From' field.
I'm not sure I can get away with SetSender => 0, cause I need to set that from
address. What I'm doing now is using a reworked version of send_by_sendmail()
that calls my_e
Package: libmime-lite-perl
Version: 3.01-5
Severity: normal
sendmail command and params are not constructed in a taint-safe fashion.
Arguments to send_by_sendmail() are used/filled in rather than having
separate vars set to defaults or untainted args.
$ENV{PATH} is not untainted either, but that
3 matches
Mail list logo
