http://www.perlmonks.org?node_id=156588


in reply to Muse - Personal Interlinked Encyclopedia Builder

You really need to learn about and use Taint. 
   MeowChow                                   
               s aamecha.s a..a\u$&owag.print
  • Comment on Re: Muse - Personal Interlinked Encyclopedia Builder

Replies are listed 'Best First'.
Taint Mode
by Pedro Picasso (Sexton) on Apr 04, 2002 at 06:35 UTC

    Thanks for the suggestion. I've untainted my input.

    I never use taint mode because I don't maintain a public http server (all my scripts are single-user only and behind a firewall), but I guess that doesn't really help other people who download my code and have it exploited. Please let me know if you think there's still a problem.



    -the Pedro Picasso
    (sourceCode == freeSpeech)
[reply]
      I think you're permitting too much. I'd write: 
        ($node) = $node =~ /\w{1,32}/g;

      [download]
      Remember. Be paranoid. They are out to get you :) 
         MeowChow                                   
               s aamecha.s a..a\u$&owag.print
[reply]
[d/l]

        I limited size between 1 and 32 as per your example, but I can't let go of my limited punctuation. Do you know where I can find the ext2 filesystem specifications for filenames?

        -the Pedro Picasso
        (sourceCode == freeSpeech)
[reply]

In Section Code Catacombs