Re: [Boston.pm] converting a thing to a number

Conor Walsh <[email protected]> Tue, 22 Feb 2022 15:22:41 -0500
Newsgroups gmane.comp.lang.perl.perl-mongers.boston
Message-ID <CAFS=4=d5osxvJVfWKmyXKkaMo2BS2Wa9wOJakQ=pYbwD4A9gbA@mail.gmail.com>
On Tue, Feb 22, 2022 at 12:12 PM <email-2Ro/Dj86MvDSUeElwK9/[email protected]> wrote:
> Extra level of annoyance: using modules from cpan is difficult.
> So, if it can be pure perl, all the better.

> The only thing that concerns me a bit is that using string eval() means
> the file could contain code I don't want to execute. and I can't figure
> out
> an easy way to prevent that.

There's wisdom here.  Avoiding dependencies can be nice, but it's
usually not worth adding a risk of arbitrary code injection.


-- 
"We are caught in an inescapable network of mutuality, tied in a
single garment of destiny. Whatever affects one directly, affects all
indirectly." -- MLK