How embarrasing for Netanel Rubin to embarrass himself and checkpoint.com like that
http://blog.gerv.net/2014/10/new-class-of-vulnerability-in-perl-web-applications/
Its amazing the amount of people that blame others for not reading the docs
But you know whats even more amazing? They patched CGI.pm to warn about this
# list context can be dangerous so warn: # http://blog.gerv.net/2014.10/new-class-of-vulnerability-in-perl- +web-applications if ( wantarray && $LIST_CONTEXT_WARN ) { my ( $package, $filename, $line ) = caller; if ( $package ne 'CGI' ) { warn "CGI::param called in list context from package $pack +age line $line, this can lead to vulnerabilities. " . 'See the warning in "Fetching the value or values of + a single named parameter"'; } }
Whatever you thought about CGI.pm before, its about to get real stupid, its breaking backwards compatibility... that was like the only good thing left about it
In reply to Re: Stop Using Perl
by Anonymous Monk
in thread Stop Using Perl
by shmem
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |