develooper Front page | perl.perl5.porters | Postings from February 2017

Re: The tricky issue of do()

Thread Previous | Thread Next
From:
Dan Book
Date:
February 22, 2017 17:26
Subject:
Re: The tricky issue of do()
Message ID:
CABMkAVVQ-7d13tC4OSyazHhe3igBQM79nEQgb8iromKVv8nA2Q@mail.gmail.com
On Wed, Feb 22, 2017 at 5:18 AM, Kenichi Ishigaki <kishigaki@gmail.com>
wrote:
>
>
> Is it possible/reasonable to remove the . (or any insecure relative
> directory in @INC) only when it's confirmed unreasonably insecure (not
> by a name but by testing actual permission), in order not to affect
> people running their scripts under a directory with proper permissions
> like their home?


 Any writable directory is theoretically insecure if a relative path is in
@INC. Also, this does not really apply specifically to the topic of do().

-Dan

Thread Previous | Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About