Addl. fix for bug 1089448: also detaint $ENV{WINDIR} on Windows

diff --git a/Bugzilla.pm b/Bugzilla.pm
index aa78f148323b9460b66e6d8df08fe1ac7c24d9cd..9cb15a7eec4d84e1ce09b1159fcf426e0ef56152 100644 (file)
--- a/Bugzilla.pm
+++ b/Bugzilla.pm
@@ -87,7 +87,7 @@ sub init_page {
             # On Windows, these paths are tainted, preventing
             # File::Spec::Win32->tmpdir from using them. But we need
             # a place to temporary store attachments which are uploaded.
-            foreach my $temp (qw(TMPDIR TMP TEMP)) {
+            foreach my $temp (qw(TMPDIR TMP TEMP WINDIR)) {
                 trick_taint($ENV{$temp}) if $ENV{$temp};
             }
             # Some DLLs used by Strawberry Perl are also in c\bin,