Re^3: Debugging a module that's failing under taint mode

yep this works for me

Thanks.

Based on the above I now have this:

#!/usr/bin/perl -T

use CGI::Carp qw(fatalsToBrowser);

use FindBin qw($RealBin);

my $safepath;
BEGIN {
    if ($RealBin =~ m!^(/home/username/website/uk/www)!) {
        $safepath = "$1/../lib";
    } else {
        die "Illegal use of software - visit www.website.uk to use thi
+s site";
    }
}
use lib "$RealBin/../lib";

use Site::HTML;    <-- line 17
[download]

This gives the same error Insecure dependency in require while running with -T switch at index.pl line 18. so I think I can safely assume that the problem is with the Site::HTML module.

Edit:

Whoops! Above I left it as use lib "$RealBin/../lib";
Changing it to use lib "$safepath"; works.

So, at least I know Site::HTML can be used with taint mode. Now to find where it doesn't function.

Comment on Re^3: Debugging a module that's failing under taint mode Select or Download Code

Replies are listed 'Best First'.
Re^4: Debugging a module that's failing under taint mode by LanX (Saint) on Jul 01, 2021 at 22:35 UTC
> so I think I can safely assume that the problem is with the `Site::HTML` module. nope, try `use lib $safepath;` instead. :) Cheers Rolf _{(addicted to the Perl Programming Language :) Wikisyntax for the Monastery}	[reply] [d/l] [select]
Re^5: Debugging a module that's failing under taint mode by Bod (Parson) on Jul 01, 2021 at 22:38 UTC
nope, try... Well spotted! I was editing my post as you typed that as I had spotted it too... Thanks for your help LanX	[reply]
Re^6: Debugging a module that's failing under taint mode by LanX (Saint) on Jul 01, 2021 at 22:48 UTC
you might be also interested to check `perlsec` when handling taint. searching for "require" produced https://perldoc.perl.org/perlsec#Taint-mode-and-@INC Note that if a tainted string is added to @INC, the following problem will be reported: `Insecure dependency in require while running with -T switch` I'm not sure tho, why using `diagnostics` or `splain` don't show this. Probably a worthwhile feature request to add above information to https://perldoc.perl.org/perldiag#Insecure-dependency-in-%25s update OK, got it ... the `Insecure dependency in` error will be thrown on multiple occasions, not only `in require` :) Cheers Rolf _{(addicted to the Perl Programming Language :) Wikisyntax for the Monastery}	[reply] [d/l] [select]

update