RE: RE: Perl code security (CGI related)
| Newsgroups | gmane.comp.security.programming |
|---|---|
| Message-ID | <[email protected]> |
I would suggest that you make a rule: any time there is the possibility that a user will be putting data into your application, you should enable Perl's taint mode. Do a google search for 'perl taint' (no quotes) for a plethora of information on this excellent security tool. > The $default is under user's control. My question is whether perl's eval