- or download this
my $from_outside=<STDIN>; my $from_inside='Hey!';
tainted($from_outside); #true
tainted($from_inside); #false
tainted($ENV{PATH}); #true
- or download this
tainted(($untainted1+$untainted2).$tainted); #true
tainted(($untainted1+$untainted2).$untainted3); #false
- or download this
open(FH, $tainted);
system($tainted);
`$tainted`;
eval($tainted);
exec($tainted);
- or download this
if($file_name=~/^(\w+)$/) {
$file_name=$1; #no longer tainted
}
open(FH, "> users/grades/$file_name") or die "Can't open grades for $f
+ile_name: $!";
- or download this
Insecure dependency in open while running with -T switch at script.pl line 4.