Set OPENSSL_MODULES to invalid location

This commit is contained in:
Janek Bevendorff 2026-03-09 23:02:26 +01:00
parent 3534d81ff2
commit 028cdc0b41
No known key found for this signature in database
GPG key ID: 2CF41D2AA8438F99

View file

@ -54,9 +54,10 @@ int main(int argc, char** argv)
QT_REQUIRE_VERSION(argc, argv, QT_VERSION_STR)
#ifdef Q_OS_WIN
// Set OPENSSL_CONF to an invalid location to prevent DLL injection via openssl.cnf.
// Set OPENSSL_CONF and OPENSSL_MODULES to an invalid location to prevent DLL injection via openssl.cnf.
// vcpkg by default hard-codes this to its packages location, which may be user-writable.
qputenv("OPENSSL_CONF", "::");
qputenv("OPENSSL_MODULES", "::");
#endif
QApplication::setAttribute(Qt::AA_EnableHighDpiScaling);