Beefy Boxes and Bandwidth Generously Provided by pair Networks
Don't ask to ask, just ask
 
PerlMonks  

Re: Insecure dependency in open while running with -T switch

by brian_d_foy (Abbot)
on Jan 19, 2008 at 06:32 UTC ( [id://663202]=note: print w/replies, xml ) Need Help??


in reply to Insecure dependency in open while running with -T switch

Chapter 2, "Secure Programming Techniques", of Mastering Perl explains it all. You untaint data by capturing it in a regular expression and using the captured parts. Taint mode affects $ENV{PATH} stops you when you try to run an external command without the full path if you haven't already cleansed $ENV{PATH}.

Good luck, :)

--
brian d foy <brian@stonehenge.com>
Subscribe to The Perl Review

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://663202]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others chanting in the Monastery: (3)
As of 2024-04-24 16:28 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found