Any variable set to a value derived from tainted data will itself be tainted, even if it is logically impossible for the tainted data to alter the variable. #### $foo = { clean => 'filename.txt' }; $foo->{dirty} = <>;