use IO::Handle; CONF->untaint;