Acme-TaintTest
view release on metacpan or search on metacpan
# Install exit handler; must be dynamic to get lexical
if ( $options{'CLEANUP'} && -d $tempdir) {
_deferred_unlink(undef, $tempdir, 1);
}
# Return the dir name
return $tempdir;
}
### MonkeyPatch the Unix implementation of File::Spec->catdir
sub _patched_pp_canonpath {
my ($self,$path) = @_;
return unless defined $path;
carp "Entered patched File::Spec->canonpath";
carp "canonpath path 0 $path is tainted" if tainted($path);
my $node = '';
my $double_slashes_special = $^O eq 'qnx' || $^O eq 'nto';
if ( $double_slashes_special
carp "canonpath path 5 $path is tainted" if tainted($path);
$path =~ s|/\z|| unless $path eq "/"; # xx/ -> xx
carp "canonpath path 6 $path is tainted" if tainted($path);
carp "canonpath node 2 $node is tainted" if tainted($node);
return "$node$path";
}
my $mock = Mock::MonkeyPatch->patch('File::Temp::tempdir' => \&_patched_tempdir);
die "MonkeyPatch tempdir failed" unless $mock;
my $mock2 = Mock::MonkeyPatch->patch('File::Spec::Unix::canonpath' => \&_patched_pp_canonpath);
die "MonkeyPatch canonpath failed" unless $mock2;
use Test::More tests => 1;
my $pathdir = $ENV{HOME}; # make variable tainted and set to an existing absolute directory
(-d $pathdir) and File::Spec->file_name_is_absolute($pathdir);
my $workdir = File::Temp::tempdir("temp.XXXXXX", DIR => "log");
ok((-d $workdir), 'tempdir test');
( run in 0.800 second using v1.01-cache-2.11-cpan-df04353d9ac )