From 01729086bf3fa67e8ef4912aa6c727ab78a32112 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= <ppisar@redhat.com>
Date: Tue, 11 Aug 2020 13:02:04 +0200
Subject: [PATCH] Do not use lib from web-service-request tool
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Adding a relative path to @INC is insecure when running the script
from a world-writable working directory. This patch removes the
useless "use lib" from web-service-request.

Signed-off-by: Petr Písař <ppisar@redhat.com>
---
 Makefile.PL             | 2 +-
 bin/web-service-request | 2 --
 2 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/Makefile.PL b/Makefile.PL
index 647d9fb..5b0af5b 100644
--- a/Makefile.PL
+++ b/Makefile.PL
@@ -42,7 +42,6 @@ my %WriteMakefileArgs = (
     "Throwable::Error" => 0,
     "Try::Tiny" => 0,
     "URI" => 0,
-    "lib" => 0,
     "namespace::clean" => 0,
     "strict" => 0,
     "warnings" => 0
@@ -60,6 +59,7 @@ my %WriteMakefileArgs = (
     "Test::More" => "0.96",
     "Test::Number::Delta" => 0,
     "base" => 0,
+    "lib" => 0,
     "utf8" => 0
   },
   "VERSION" => "2.006002",
diff --git a/bin/web-service-request b/bin/web-service-request
index 2846739..14d3726 100755
--- a/bin/web-service-request
+++ b/bin/web-service-request
@@ -5,8 +5,6 @@ use 5.008;
 use strict;
 use warnings;
 
-use lib 'lib';
-
 use Data::Dumper;
 use Getopt::Long;
 use GeoIP2::WebService::Client;
-- 
2.25.4