in reply to Re: How to disable taint checking by Perl?
in thread How to disable taint checking by Perl?

It seems the creators of the Mojolicious package have found some way to entirely disable taint checks
They say they don't support it, where is it disabled?
  • Comment on Re^2: How to disable taint checking by Perl?

Replies are listed 'Best First'.
Re^3: How to disable taint checking by Perl?
by Polyglot (Chaplain) on Oct 25, 2023 at 11:34 UTC
    The language they employ to disavow any association with 'taint' seems to indicate they disabled it, because their package is supported by the latest two releases of Perl, which, if I am not mistaken, typically enforce taint without it being explicitly called.

    Blessings,

    ~Polyglot~

      This is misinformed. Taint mode only gets enabled when running a script under differing real and effective user or group ids. Otherwise taint mode needs to be explicitly enabled in the script using the -T command line/hashbang. See perlsec.

      Enforcing taint would mean a lot more programming effort in each script since even system() or open() won't work easily without explicit untainting.

        Corion,

        It has been my understanding that the taint mode was not explicitly turned on as well--until I encountered issues not long back with a more recent version of Perl, leading to my present uncertainty. Can you verify that the current Perl version does not automatically use taint, without it having been explicitly invoked in the script, and are you aware of any online documentation for this?

        Blessings,

        ~Polyglot~