Re: Trojan Horse? (taint mode)

[BrentDax]

in reply to Trojan Horse? (taint mode)

There are some pretty dangerous possibilities:

$a=" (?{system('rm -rf *')})";
$b=~/foo($a)bar/;

That will ruin your whole day.

=cut
--Brent Dax
There is no sig.

[blakem]

For this to ruin your day, you would have to explicitly permit the execution of code within interpolated variables with use re 'eval'; So, like the example in the book, it looks scary on the surface, but isn't that bad in practice.

-Blake

[chip]

Boy am I glad I pushed for use re 'eval'. It's at times like this when paranoia pays off...

    -- Chip Salzenberg, Free-Floating Agent of Chaos