in reply to Re^7: How to disable taint checking by Perl?
in thread How to disable taint checking by Perl?

I see that when the paragraph about preprocessor symbols was added, it was placed between the phrase with the following exceptions: and the list of exceptions. I have submitted a patch to fix that (here), but in the meantime the document may make a little more sense if you temporarily cover up the paragraph starting "Support for taint checks adds an overhead to all Perl programs".

  • Comment on Re^8: How to disable taint checking by Perl?

Replies are listed 'Best First'.
Re^9: How to disable taint checking by Perl?
by Polyglot (Chaplain) on Oct 25, 2023 at 16:14 UTC
    HV, I may be rather dull, but I didn't see any mention of compiling Perl in that entire section relative to the preprocessor symbols. Perhaps those in the know would automatically understand it: I'm not at their level. I didn't understand it to be saying anything about compilation.

    The only remarks I found about compiling in that document are made in the two consecutive sections labeled "Shebang Race Condition" and "Protecting Your Programs" followed by one additional section titled "Algorithmic Complexity Attacks"--none of which is related to taint.

    Perhaps you could suggest clarifications about the compilation aspect as well.

    Blessings,

    ~Polyglot~

      That's a fair point: those in the know would be aware that "C preprocessing symbols" are only looked at during compilation, but clearly this manpage is aimed at a wider audience. I'm not sure of a good way to rephrase it though; I'll see if I can come up with something.

      Update: I went with appending ".. when building perl", which feels like a simple and sufficient clarification.