develooper Front page | perl.perl5.porters | Postings from August 2021

Re: Pre-RFC: Configure option for whether to include taint support

Thread Previous | Thread Next
From:
Chase Whitener
Date:
August 13, 2021 13:04
Subject:
Re: Pre-RFC: Configure option for whether to include taint support
Message ID:
CALoNeLt3rAV0TZzD8rDh62zjhusgd-QiZ_rif2DgR7pGPW-G1g@mail.gmail.com
On Fri, Aug 13, 2021 at 11:31 AM Neil Bowers <neilb@neilb.org> wrote:

> Anyway, I really wish we completely removed that misfeature, but if wecan't,
> adding it as an option to Configure is the next best thing.
>
>
> I think/hope that adding a Configure option is the first step on a path
> that looks something like the following:
>
>    1. Add Configure option, with taint included by default
>    2. Toggle so that taint isn’t included by default
>    3. Remove taint, so there isn’t a Configure option
>
> Once step 1 is done, we can find out how many things on CPAN break, and do
> something about those. We’d need to give people time to adjust, so I guess
> we’d have to stay on step 1 for at least two annual releases.
>
> If we move to step 2, distributions would presumably start shipping a perl
> that doesn’t have taint support, which I think inexorably moves us towards
> step 3.
>
> Depending on the discussion we get here, and the response to a Configure
> option, of course we may decide that we should stick at step 1. But I
> suspect that giving people a "go 10% faster" option, where the trade off is
> a feature they never use, is going to nudge us along.
>
>
> Neil
>

Thanks, Neil. That sounds like a good plan to me!  :+1:

>

Thread Previous | Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About