Front page | perl.perl5.porters |
Postings from August 1999
Re: RFC new File::Find
Thread Previous
|
Thread Next
From:
Dan Sugalski
Date:
August 30, 1999 07:07
Subject:
Re: RFC new File::Find
Message ID:
Pine.LNX.4.10.9908301003210.20186-100000@tuatha.sidhe.org
On Mon, 30 Aug 1999 jarausch@igpm.rwth-aachen.de wrote:
> I have modified a version of File::Find given by Ed <ed@chronos.net> .
>
> 2nd) untainting - this needs some care
> Using the current (5.005_61) File::Find in Taint mode doesn't work,
> since e.g. readdir or readlink results will become tainted.
While I can understand needing to untaint inside of File::Find, the
filenames it returns really ought to be tainted. Using this module doesn't
make a filename of "rm -r /" any safer...
Dan
Thread Previous
|
Thread Next