From: Frédéric Buclin <LpSolit@gmail.com>
Date: Thu, 7 Jan 2016 00:43:45 +0000 (+0100)
Subject: Addl. fix for bug 1089448: also detaint $ENV{WINDIR} on Windows
X-Git-Tag: release-5.1.1~111
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=76fd2f8984309af7331c470d9340e03dcadae56f;p=thirdparty%2Fbugzilla.git

Addl. fix for bug 1089448: also detaint $ENV{WINDIR} on Windows
---

diff --git a/Bugzilla.pm b/Bugzilla.pm
index 16075b2d12..221a64f764 100644
--- a/Bugzilla.pm
+++ b/Bugzilla.pm
@@ -90,7 +90,7 @@ sub init_page {
             # On Windows, these paths are tainted, preventing
             # File::Spec::Win32->tmpdir from using them. But we need
             # a place to temporary store attachments which are uploaded.
-            foreach my $temp (qw(TMPDIR TMP TEMP)) {
+            foreach my $temp (qw(TMPDIR TMP TEMP WINDIR)) {
                 trick_taint($ENV{$temp}) if $ENV{$temp};
             }
             # Some DLLs used by Strawberry Perl are also in c\bin,