Open Source Zealots Dowplay Danger Of Perl Flaw On ZDNet Talkbacks

TalkBack 15 of 30:

Next »

« Previous

• Thread View
• Flat View

thankfully, perl can force you to validate your data

I agree with most of what you say. Fortuenately, Perl has a higly documented feature that is recommended in almost every perl web developmentbook/article/<ocument.

use taint;

With these 10 key strokes perl will implicitly mistrust all user supplied data, and cause your program to barf should you use that data without validation.

Of course this feature would make a program like webmin a bit more tedious to write, but since when has security been anything but?

Posted by: spr0ck3t   Posted on: 12/01/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• Get top-ranked Novell support for Red Hat at 50% less Novell A simplified IT environment isn't just less complex, it's more reliable. ... Download Now