Re: (DDA) Re: (elbie): Newbie Tainted glob question


Your skill will accomplish what the force of many cannot
	PerlMonks

Re: (DDA) Re: (elbie): Newbie Tainted glob question

by DamnDirtyApe (Curate)

on Oct 25, 2001 at 08:22 UTC ( [id://121372]=note: print w/replies, xml )

Need Help??

in reply to (elbie): Newbie Tainted glob question
in thread Newbie Tainted glob question

Yup, a simple matter of adding the -T to the command line.

Something struck me as a little odd there, so I played around and discovered that warnings don't follow the same rule -- warnings can be turned on or off from the shebang without appearing on the command line. So, is -w the only option to which this applies?

(Not that it matters much; I always use use strict; use warnings; use diagnostics;, but I'm curious to know how it works.)

_______________
DamnDirtyApe
Home Node | Email

Comment on Re: (DDA) Re: (elbie): Newbie Tainted glob question Download Code

Replies are listed 'Best First'.

Re: Re: (DDA) Re: (elbie): Newbie Tainted glob question
by blakem (Monsignor) on Oct 25, 2001 at 11:25 UTC

this tpj article

official archive

I have to admit that I don't understand it enough to actually answer your question, but the article above ends with:

And now you know why perl 5.004 has the new warning Too late for -T option. Taint mode isn't effective unless it's done from the very start, i.e. from the real command line. By the time yylex is called, a lot of taint-related things should already have happened, so perl can't guarantee that your data is safe. To avoid this problem, always make -T the first option on the shebang line.

-Blake

[reply]

In Section Seekers of Perl Wisdom