From 01729086bf3fa67e8ef4912aa6c727ab78a32112 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= Date: Tue, 11 Aug 2020 13:02:04 +0200 Subject: [PATCH] Do not use lib from web-service-request tool MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Adding a relative path to @INC is insecure when running the script from a world-writable working directory. This patch removes the useless "use lib" from web-service-request. Signed-off-by: Petr Písař --- Makefile.PL | 2 +- bin/web-service-request | 2 -- 2 files changed, 1 insertion(+), 3 deletions(-) diff --git a/Makefile.PL b/Makefile.PL index 647d9fb..5b0af5b 100644 --- a/Makefile.PL +++ b/Makefile.PL @@ -42,7 +42,6 @@ my %WriteMakefileArgs = ( "Throwable::Error" => 0, "Try::Tiny" => 0, "URI" => 0, - "lib" => 0, "namespace::clean" => 0, "strict" => 0, "warnings" => 0 @@ -60,6 +59,7 @@ my %WriteMakefileArgs = ( "Test::More" => "0.96", "Test::Number::Delta" => 0, "base" => 0, + "lib" => 0, "utf8" => 0 }, "VERSION" => "2.006002", diff --git a/bin/web-service-request b/bin/web-service-request index 2846739..14d3726 100755 --- a/bin/web-service-request +++ b/bin/web-service-request @@ -5,8 +5,6 @@ use 5.008; use strict; use warnings; -use lib 'lib'; - use Data::Dumper; use Getopt::Long; use GeoIP2::WebService::Client; -- 2.25.4