in reply to Re: First Time Untainting Data
in thread First Time Untainting Data
Thanks for the tip. I rewrote the untaint subroutine as follows (borrowing from perlsec):
sub untaint { my $s = $_[0]; if ($s =~ /^([\w \-\@\(\)\,\.\/]+)$/) { $s = $1; # $data now untainted } else { die "Bad data in $s"; # log this somewhere } return $s; }
When I get home, I'll look into writing a separate untaint subroutine for each field, but is this more correct than the original?
Thanks again.
|
---|
Replies are listed 'Best First'. | |
---|---|
Re: First Time Untainting Data
by Abigail-II (Bishop) on Oct 10, 2003 at 17:10 UTC |
In Section
Seekers of Perl Wisdom