Re^2: Should non-filename glob() results still be tainted?

G'day Corion,

"... subvert your code by creating files that match ..."

Is the documentation wrong? It says "... no filenames are matched ..." (in the scenario that I presented).

Perhaps some undocumented mechanism is in play of which I'm unaware. Could you expand on your answer?

— Ken

Comment on Re^2: Should non-filename glob() results still be tainted?

Replies are listed 'Best First'.
Re^3: Should non-filename glob() results still be tainted? by Corion (Patriarch) on Jan 10, 2021 at 12:44 UTC
Hmm - no, it seems you are correct. I didn't know that (and hadn't read the documentation)!	[reply]