fix taint tests

Perl-Toolchain-Gang · Mar 15, 2014 · 26e2515 · 26e2515
1 parent a0ce932
commit 26e2515
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/lib/Module/Metadata/ExtractVersion.pm b/lib/Module/Metadata/ExtractVersion.pm
@@ -45,10 +45,15 @@ sub eval_version
     print {$temp} _pl_template( $string, $sigil, $var );
     close $temp;
 
+    # detaint...
+    undef $ENV{PATH};
+    my $perl = $^X;
+    $perl = $1 if $perl =~ m{^(.+)}s;
+
     my $rc;
     my $result;
     my $err = gensym;
-    my $pid = open3(my $in, my $out, $err, $^X, $temp);
+    my $pid = open3(my $in, my $out, $err, $perl, $temp);
     my $killer;
     if ($^O eq 'MSWin32') {
         $killer = fork;