in reply to (elbie): Newbie Tainted glob question
in thread Newbie Tainted glob question

Yup, a simple matter of adding the -T to the command line.

Something struck me as a little odd there, so I played around and discovered that warnings don't follow the same rule -- warnings can be turned on or off from the shebang without appearing on the command line. So, is -w the only option to which this applies?

(Not that it matters much; I always use use strict; use warnings; use diagnostics;, but I'm curious to know how it works.)

_______________
DamnDirtyApe
Home Node | Email

Replies are listed 'Best First'.
Re: Re: (DDA) Re: (elbie): Newbie Tainted glob question
by blakem (Monsignor) on Oct 25, 2001 at 11:25 UTC
    You might be able to find the answer in this tpj article (would have linked to the official archive but it always seems to hang in my browser)

    I have to admit that I don't understand it enough to actually answer your question, but the article above ends with:

    And now you know why perl 5.004 has the new warning Too late for -T option. Taint mode isn't effective unless it's done from the very start, i.e. from the real command line. By the time yylex is called, a lot of taint-related things should already have happened, so perl can't guarantee that your data is safe. To avoid this problem, always make -T the first option on the shebang line.
    So, I assume the answer can be found somewhere in there....
    time for me to go read it myself, now.

    -Blake

[reply]

In Section Seekers of Perl Wisdom