Question2144

Hi There,

I have a small issue with the following line of text when loading the apache website of foswiki on Ubuntu 16.04.

Foswiki detected an internal error - please check your Foswiki logs and webserver logs for more information.

Insecure dependency in eval while running with -T switch

Log from error.log:

Insecure dependency in eval while running with -T switch at /var/www/Foswiki-1.1.9/lib/Foswiki.pm line 3153.

*Background: *

Originally the VM was on ubuntu 12.04 and running foswiki 1.1.9.
then I ran the upgrade on ubuntu and made it to 14.04 and was able to make the apache webservice work for foswiki.
then I upgraded it to ubuntu 16.04 and seeing the error above.
on ubuntu 12.04: perl version was 5.14
on ubuntu 16.04: perl version is 5.22

-- BBCWikiNew - 21 May 2023

Foswiki doesn't support taintedness anymore. Please fix your script and remove the -T switch.

-- MichaelDaum - 22 May 2023

If any one can guide me which script/s i need to fix and where I need to remove the -T switch from, that would be much appreciated.

-- BBCWikiNew - 23 May 2023

And thanks Michael for the headsup.

-- BBCWikiNew - 23 May 2023

I think got the hint now: Insecure dependency errors when using LOCALEs Setting a Locale in the configuration causes internal errors because of perl's mechanisms used to protect applications from potentially untrusted input. The systems Locale strings are considered "Tainted" and Foswiki fails with taint errors. At this point we don't have a good solution. Significant work is being done for future releases to resolve this issue. In the meantime, if you require a custom Locale, and are experiencing errors like Insecure dependancy in x while running with -T switch our only solution presently is to disable Taint checking by removing the "-T" switch from the first line of each script in the bin directory. Source: https://foswiki.org/System.ReleaseNotes01x01

-- BBCWikiNew - 23 May 2023