#!/usr/bin/perl -Tw use strict; use CGI qw(:standard *table ); use CGI::Carp qw(fatalsToBrowser); my $docroot = "/home/httpd/sec-html/"; sub is_tainted { return ! eval { join('',@_), kill 0; 1; }; } print header(); $ENV{SCRIPT_FILENAME} =~ /\/home\/httpd\/sec\-html\/(.*?)\//; #$ENV{SCRIPT_FILENAME} =~ /${docroot}(.*?)\//; my $realm = $1; if (is_tainted($realm)) { print "realm: $realm is tainted in main0!
"; } else { print "realm: $realm is not tainted in main0
"; }