Front page | perl.perl5.porters |
Postings from December 2013
Data::Undump
Thread Next
From:
demerphq
Date:
December 24, 2013 16:11
Subject:
Data::Undump
Message ID:
CANgJU+VFUApK1ZOXc00qzC5EbvvDpxNfEqA+YPp-_nx7tbxq5Q@mail.gmail.com
The recent thread about Data::Dumper reminded me of something. Some
time ago I more or less solved the "Data::Dumper is insecure" problem
by writing a deserializer for Data::Dumper. It is faster than eval,
and because it does not use eval it is more or less secure (modulo
bugs :-)
While it is more or less true that only perl can parse Perl, it turns
out that its relatively easy to handle most of what Data::Dumper can
output.
It is not currently completely full featured, however for many use
cases it should be quite usable.
http://search.cpan.org/dist/Data-Undump/
Yves
--
perl -Mre=debug -e "/just|another|perl|hacker/"
Thread Next