develooper Front page | perl.perl5.porters | Postings from March 2012

Re: pop @INC (".")

Thread Previous | Thread Next
From:
Paul Johnson
Date:
March 9, 2012 06:26
Subject:
Re: pop @INC (".")
Message ID:
20120309142626.GI12334@pjcj.net
On Sat, Mar 10, 2012 at 02:09:55AM +1300, Kent Fredric wrote:
> On 10 March 2012 01:25, Paul Johnson <paul@pjcj.net> wrote:
> 
> > Yes, it's analogous to having "." in $PATH, and perhaps it's obvious to
> > others, but I'd quite like to see some code showing why having "." in
> > @INC is undesirable / unwise / dangerous / a security problem.
> >
> > Has the presence of "." in @INC caused problems, or is this a
> > theoretical concern?
> 
> I think a more useful thing to do, might be instead of completely
> removing q{.} from @INC, would be replacing q{.} with a hook of sorts
> that triggers when a file would otherwise be loaded from q{.} so you
> can decide what to do with it.

It's possible.  But until we know exactly what problem we are solving
it's rather hard to say.

-- 
Paul Johnson - paul@pjcj.net
http://www.pjcj.net

Thread Previous | Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About