Syntactic Confectionery Delight | |
PerlMonks |
(kudra: getopt correction) Re2: variable I expect to be tainted isn't: possible explanations?by kudra (Vicar) |
on May 21, 2002 at 12:44 UTC ( [id://168101]=note: print w/replies, xml ) | Need Help?? |
You're right of course. I added the command-line
check in quickly later.
Making the change suggested by derby shows $two to be tainted (on one of the systems). I tested with Sifmole's syntax (previously I'd just used offline mode) and that shows the variable to be tainted. So this appears to be applicable to just CGI paramater gathering, and only in offline mode. And now derby's provided a nice logical explanation--thanks all! I'm still not convinced it should be leaving them untainted rather than explicitly retainting them, but at least now I know why this is happening. (CGI version is 2.56 with perl 5.6.0 and 2.80 with perl 5.7.3, which is the system I tested the second time.) Update too many updates to mention... this node was almost like the chatterbox.
In Section
Seekers of Perl Wisdom
|
|