develooper Front page | perl.perl5.porters | Postings from May 2013

Re: RFC: Removing CGI.pm from the core distribution

Thread Previous | Thread Next
From:
Leon Timmermans
Date:
May 24, 2013 01:43
Subject:
Re: RFC: Removing CGI.pm from the core distribution
Message ID:
CAHhgV8i0XRtnRnn53Ldzk5wBwOwJ1sMEQHVhit00mtor0xJpGw@mail.gmail.com
On Fri, May 24, 2013 at 1:50 AM, Ricardo Signes
<perl.p5p@rjbs.manxome.org> wrote:
> I think it's time to seriously consider removing CGI.pm from the core
> distribution.  It is no longer what I'd point *anyone* at for writing *any*
> sort of web code.  It is in the core, as far as I know, because once it was the
> state of the art, and a major reason for many people to use the language.

AFAIK, it's in core because perl 4 shipped with all then-known
libraries and CPAN wasn't founded until a year after perl 5 came out
:-|

> I
> don't think either is true now.  Finally, if you need CGI, it's easy to install
> after installing perl, just like everything else we've dropped from the core
> distribution.

I think the "it will be installed everywhere" is the one valid reason
why one may want to use CGI.pm.

> In the past two years, all my interactions with CGI.pm have been to fix bugs or
> send pull requests to quiet it from making noise in the core.  I expect others
> here have had the same experience.
>
> Are there any arguments out there to compel me to feel otherwise about this?

Another datapoint: CGI.pm is very much facing the hostile internet.
That means that any security issue in CGI is currently our problem
too.

Leon

Thread Previous | Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About