in reply to ZARN - security code analysis for perl
Discipulus, thanks for asking this ... made me realise I didn't have anything on this important topic at my List of Security References ... so, after a quick google, I've just added a new "Static Program Analysis" section there, starting with your node of course, along with:
The only static code analysis tool I've personally used on Perl code is the most excellent Perl::Critic, though I don't recall using it for Security analysis.
Further cool references on static code security analysis welcome.
|
---|