Re^5: Debugging a module that's failing under taint mode

Replies are listed 'Best First'.
Re^6: Debugging a module that's failing under taint mode by LanX (Saint) on Jul 01, 2021 at 22:48 UTC
you might be also interested to check `perlsec` when handling taint. searching for "require" produced https://perldoc.perl.org/perlsec#Taint-mode-and-@INC Note that if a tainted string is added to @INC, the following problem will be reported: `Insecure dependency in require while running with -T switch` I'm not sure tho, why using `diagnostics` or `splain` don't show this. Probably a worthwhile feature request to add above information to https://perldoc.perl.org/perldiag#Insecure-dependency-in-%25s update OK, got it ... the `Insecure dependency in` error will be thrown on multiple occasions, not only `in require` :) Cheers Rolf _{(addicted to the Perl Programming Language :) Wikisyntax for the Monastery}	[reply] [d/l] [select]

Replies are listed 'Best First'.

Note that if a tainted string is added to @INC, the following problem will be reported:
Insecure dependency in require while running with -T switch

I'm not sure tho, why using diagnostics or splain don't show this.

Probably a worthwhile feature request to add above information to https://perldoc.perl.org/perldiag#Insecure-dependency-in-%25s

OK, got it ... the Insecure dependency in error will be thrown on multiple occasions, not only in require :)

Cheers Rolf
_{(addicted to the Perl Programming Language :)

Wikisyntax for the Monastery}