Perhaps it would be a good idea to add a section under the tutorials specifically addressing Perl security issues. Unfortunately, the only node there, which looks pretty good by the table of contents, is written in a language I don't even recognize ((lang: lt) CGI/Perl Script Security). I think it would be helpful to have separate tutorials exploring the potential dangers of functions like system, exec, backticks, open, eval, do, and others addressing security measures such as Safe, Opcode, Taint. Right now there is information available, but mostly it is scattered about through offsite links, manpages and FAQs. I'd bet quite a lot of people could benefit from more in depth analyses of these dangers.
| [reply] |
| [reply] |