But your missing the very first step. You need to decide what type of file myprog is, where it is, what executable is required to run it, then locate that executable and invoke it with myprog as it's argument long before you reach the point of needing to re-invent the wheel of command pipelinining.
... so that even a command with no arguments is secure.
And how are you going invoke this mythical "secure perl script"? Via a shell?
In reply to Re^7: RFC: Perl-Critic policy: ProhibitInlineSystemArgs
by BrowserUk
in thread RFC: Perl-Critic policy: ProhibitInlineSystemArgs
by davidrw
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |