Taint Mode

[Pedro Picasso]

Thanks for the suggestion. I've untainted my input.

I never use taint mode because I don't maintain a public http server (all my scripts are single-user only and behind a firewall), but I guess that doesn't really help other people who download my code and have it exploited. Please let me know if you think there's still a problem.

-the Pedro Picasso
(sourceCode == freeSpeech)

[MeowChow]

I think you're permitting too much. I'd write:

  ($node) = $node =~ /\w{1,32}/g;

Remember. Be paranoid. They are out to get you :)

   MeowChow                                   
               s aamecha.s a..a\u$&owag.print

[Pedro Picasso]

I limited size between 1 and 32 as per your example, but I can't let go of my limited punctuation. Do you know where I can find the ext2 filesystem specifications for filenames?

-the Pedro Picasso
(sourceCode == freeSpeech)

[MeowChow]

Ext2 is very lenient, allowing for any character except except for NULL and "/" in a filename. I still recommend that you lose the punctuation.

   MeowChow                                   
               s aamecha.s a..a\u$&owag.print