Leon Timmermans <fawaka <at> gmail.com> writes: >>The value returned by "length" can be tainted even though it's >>just an integer. Is this a bug, or is it by design? > >AFAIK any $foo = <expression using a tainted value> should make $foo >tainted, unless stated otherwise. Agreed. But this does argue for an untaint() builtin as part of the language, since doing a regular expression match on something that's always an integer starts to look a bit daft. -- Ed Avis <eda@waniasset.com>