[Bug 1452050] CVE-2016-10374 perltidy: Uses current working directory without symlink-attack protection