$ENV{REQUEST_URI} = q{/Products/bt-foo.aspx?evil=";system('ls -l');".aspx}; #### my $in = '/Products/bt-(\w+).aspx';