#!/usr/bin/perl -wT use strict; use warnings; use XML::Simple; # used to read the xml config file my $parser = new XML::Simple(keeproot => 0); my $_config_file = "blah.xml"; my $_config_path = "/some/path"; unless ($_config_path =~ m#^(/some/path)$#){ #some regex I suspect will untaint the data, but i wonder is this is needed because I set the vars from within my program # and from what I is that taint only check data from other processes die("FATAL Error, the path you provide doens't seem to be a valid path at all"); } print "match $1 \n"; my $config_path=$1; my $file= "${config_path}/${_config_file}"; print "complete path to file: $file \n"; my $_Config = $parser->XMLin($file); print "\$_config = $_Config \n";