sub process_dak_commands {
my $commands = shift;
+ msg("log", "processing ${main::current_incoming_short}/$commands\n");
+
# TODO: get mail address from signed contents
# and NOT implement a third parser for armored PGP...
$main::mail_addr = undef;
my $stat;
local (*PIPE);
+ if ($file =~ /^([-\w.+~]+)$/) {
+ $file = $1;
+ } else {
+ msg( "log", "Tainted filename, skipping: $file\n" );
+ return "LOCAL ERROR";
+ }
+
$stat = 1;
if ( -x $conf::gpg ) {
debug( "executing $conf::gpg --no-options --batch "