m/httpd: untaint $PATH

munin-monitoring · Jul 13, 2023 · bd4f4a7 · bd4f4a7
1 parent 0c057fa
commit bd4f4a7
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/script/munin-httpd b/script/munin-httpd
@@ -13,6 +13,8 @@ use Munin::Master::Graph;
 use Munin::Master::HTML;
 use Munin::Common::Logger;
 
+# Untaint $ENV{PATH}
+$ENV{PATH} = "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
 
 sub handle_request {
     my $self = shift;