my $from_outside=<STDIN>; my $from_inside='Hey!';
tainted($from_outside); #true
tainted($from_inside); #false
tainted($ENV{PATH}); #true

##</code><code>##

tainted(($untainted1+$untainted2).$tainted); #true
tainted(($untainted1+$untainted2).$untainted3); #false

##</code><code>##

open(FH, $tainted);
system($tainted);
`$tainted`;
eval($tainted);
exec($tainted);

##</code><code>##

if($file_name=~/^(\w+)$/) {
    $file_name=$1;  #no longer tainted
}

open(FH, "> users/grades/$file_name") or die "Can't open grades for $file_name: $!";

##</code><code>##

Insecure dependency in open while running with -T switch at script.pl line 4.