Well, actually I don't know any resources. Perhaps we should go start creating one around the Monastery here?

Would Q&A be an ok Area for such a thing, or should we perhaps make it into a tutorial. I can't say I know enough about security to cover Everything(tm) - but with the help of fellow monks it could get a nice (and IMHO needed) thing.

What are your thoughts on this?

super: now I'm done writing this, I note a certain "perlcgi" obsoletes my node before even having finished it. Thanks a lot!
;-)

-- 
bash$ :(){ :|:&};:
[download]

Well, the Perl security manpage at the Library is a very good read, though it doesn't really cover CGI. A must_read anyway. //mjh

One of the remedies they offer is - surprise - "Write safer CGI programs", and they recommend the following links:

http://www-4.ibm.com/software/developer/library/secure-cgi/
http://www.cert.org/tech_tips/cgi_metacharacters.html
http://www.cert.org/advisories/CA-97.24.Count_cgi.html

As of now, I didn't check those myself, but maybe someone finds them useful?!

-- 
bash$ :(){ :|:&};:
[download]