Some versions of Ruby complain about these variables
diff --git a/lib/whimsy/asf/mlist.rb b/lib/whimsy/asf/mlist.rb
index cdc6df4..f420e6c 100644
--- a/lib/whimsy/asf/mlist.rb
+++ b/lib/whimsy/asf/mlist.rb
@@ -385,7 +385,7 @@
                  ARCH_MBOX_PUB, ARCH_MBOX_PRV, ARCH_MBOX_RST, ARCH_EXT_MAIL_ARCHIVE]
     # TODO alias archivers: either add list or use RE to filter them
 
-    LIST_BASE = ASF::Config[:subscriptions] # allow overrides for testing etc
+    LIST_BASE = ASF::Config[:subscriptions].untaint # allow overrides for testing etc
 
     LIST_MODS = File.join(LIST_BASE, 'list-mods')
 
diff --git a/lib/whimsy/asf/podling.rb b/lib/whimsy/asf/podling.rb
index 41829de..e5b945c 100644
--- a/lib/whimsy/asf/podling.rb
+++ b/lib/whimsy/asf/podling.rb
@@ -148,7 +148,7 @@
       podlings_xml = File.join(incubator_content, 'podlings.xml')
 
       # see if there is a later version
-      cache = ASF::Config.get(:cache)
+      cache = ASF::Config.get(:cache).untaint
       if File.exist? File.join(cache, 'podlings.xml')
         if File.mtime(File.join(cache, 'podlings.xml')) > File.mtime(podlings_xml)
           podlings_xml = File.join(cache, 'podlings.xml')