[sf-perl] randomize particular lines

Joseph Brenner doom at kzsu.stanford.edu
Tue Mar 7 15:32:06 PST 2006


Chris Palmer <chris at noncombatant.org> wrote:

> Joseph Brenner writes:
> 
> > I don't use -T on non-cgi scripts myself...
> 
> You really should. Any warning you get as a result of taint checking is
> in fact a real, live security bug. Taint mode has no false alarms.
> 
> > if you run them through the debugger you'll get a "too late to taint"
> > error.
> 
> So make a habit of putting "-T" on *all* Perl command lines.

I tried it with perlnow.el, and I see that it grabs the
-T off of the hashbang line and passes it through to the
debugger automatically.

If I hadn't written this, I would be impressed.  

(As it is, I'm impressed with how much I can forget about
my own code.)



More information about the SanFrancisco-pm mailing list