From 23a4e44bedabe5b8b651346cabc2a870c5377a30 Mon Sep 17 00:00:00 2001 From: Eric Wong Date: Wed, 25 May 2016 01:44:46 +0000 Subject: remove Email::Address dependency git has stricter requirements for ident names (no '<>') which Email::Address allows. Even in 1.908, Email::Address also has an incomplete fix for CVE-2015-7686 with a DoS-able regexp for comments. Since we don't care for or need all the RFC compliance of Email::Address, avoiding it entirely may be preferable. Email::Address will still be installed as a requirement for Email::MIME, but it is only used by the Email::MIME::header_str_set which we do not use --- Makefile.PL | 1 - 1 file changed, 1 deletion(-) (limited to 'Makefile.PL') diff --git a/Makefile.PL b/Makefile.PL index 9e0c6e8f..3cffe133 100644 --- a/Makefile.PL +++ b/Makefile.PL @@ -18,7 +18,6 @@ WriteMakefile( # We also depend on git. # Keep this sorted and synced to the INSTALL document 'Date::Parse' => 0, - 'Email::Address' => 0, 'Email::Filter' => 0, 'Email::MIME' => 0, 'Email::MIME::ContentType' => 0, -- cgit v1.2.3-24-ge0c7