New Foswiki release 2.1.6 is available with important security fixes.
Sourceforge foswiki email lists being discontinued. Subscribe to the new Foswiki announce and discuss lists at MailingLists
This question about Using an extension: Asked

Insecure dependency when using ./rest /TagMePlugin/addTag

When trying to use ./rest as explain in The documentation, I've got the following error

$ ./rest /TagMePlugin/addTag tag=Admin webtopic=System.WebHome
Insecure dependency in open while running with -T switch at /home/batman/btsync/foswiki/lib/Foswiki/ line 2788.
at /home/batman/btsync/foswiki/lib/Foswiki/ line 2788.
Foswiki::Func::saveFile('/home/batman/btsync/foswiki/working/work_areas/TagMePlugin/_t...', '# This file is generated, do not edit\x{a}001, Admin, admin\x{a}') called at /home/batman/btsync/foswiki/lib/Foswiki/Plugins/ line 1418
Foswiki::Plugins::TagMePlugin::_writeTagInfo('System.WebHome', '001, Admin, admin') called at /home/batman/btsync/foswiki/lib/Foswiki/Plugins/ line 1219
Foswiki::Plugins::TagMePlugin::_addTag('HASH(0x3e51e68)') called at /home/batman/btsync/foswiki/lib/Foswiki/Plugins/ line 125
Foswiki::Plugins::TagMePlugin::addTag('Foswiki=HASH(0x225d230)', 'TagMePlugin', 'addTag', 'Foswiki::Response=HASH(0x2f96608)') called at /home/batman/btsync/foswiki/lib/Foswiki/ line 704
Foswiki::Func::__ANON__('Foswiki=HASH(0x225d230)', 'TagMePlugin', 'addTag', 'Foswiki::Response=HASH(0x2f96608)') called at /home/batman/btsync/foswiki/lib/Foswiki/UI/ line 242
Foswiki::UI::Rest::rest('Foswiki=HASH(0x225d230)') called at /home/batman/btsync/foswiki/lib/Foswiki/ line 316
Foswiki::UI::__ANON__() called at /usr/share/perl5/vendor_perl/ line 421
eval {...} called at /usr/share/perl5/vendor_perl/ line 413
Error::subs::try('CODE(0x22552f0)', 'HASH(0x2f48240)') called at /home/batman/btsync/foswiki/lib/Foswiki/ line 435
Foswiki::UI::_execute('Foswiki::Request=HASH(0x2f25e60)', 'CODE(0x2f25b18)', 'command_line', 1, 'rest', 1) called at /home/batman/btsync/foswiki/lib/Foswiki/ line 274
Foswiki::UI::handleRequest('Foswiki::Request=HASH(0x2f25e60)') called at /home/batman/btsync/foswiki/lib/Foswiki/Engine/ line 53
Foswiki::Engine::CLI::run('Foswiki::Engine::CLI=HASH(0x2745390)') called at ./rest line 24.
Foswiki detected an internal error - please check your Foswiki logs and webserver logs for more information.

Insecure dependency in open while running with -T switch%

  • perl version : 5.18
  • version (shown under "webserver environment" tab in configure, IIRC) 3.63
  • OS/environment Archlinux up to date
  • Are you using locales (check under Internationalization tab in configure) Yes
  • What is {Site}{CharSet} set to utf-8
Thanks in advance for any help

-- JeanPhilippeRutault - 15 Apr 2014

If you can run your site without Locales enabled, that will probably help. There are a number of issues with Locale support. The issue is that Perl considers any Locale information tainted. Enabling locales makes taint checking fail all over the place.

The other option if Locales are required, is to remove the -T flag from all the perl scripts and disable taint checking.

-- GeorgeClark - 15 Apr 2014

with the -T flags disable, I have an issue with Foswiki::Plugins::TagmePlugins::style unitialized on line 236 of Hardcoded style="default" just before the test and all goes well. But not an elegant solution. Thanks for your quick answer. I will try with locale disable.

-- JeanPhilippeRutault - 16 Apr 2014

QuestionForm edit

Subject Using an extension
Extension TagMePlugin
Version Foswiki 1.1.9
Status Asked
Related Topics
Topic revision: r3 - 16 Apr 2014, JeanPhilippeRutault - This page was cached on 23 Mar 2018 - 04:38.

The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License