I am running a perl handler in apache 2.2.11 / mod_perl 2.0.4 / perl 5.10.0 (debian lenny). Since I updated from etch / apache 2.2.9 / perl 5.8.8 yesterday I am getting the following warnings in my handler (the handler itself is unchanged): Insecure dependency in require while running with -t switch Insecure dependency in eval while running with -t switch The routine where the warnings occur just contains an eval() using Safe.pm (permitting only very basic operations). I untaint the code before eval'ing. According to perlsec the "Insecure dependency in require" occurs when there is a tainted value in @INC. Since I dont change @INC in my handler and the eval() doesnt contain any use(), require() or do(), I dont understand whats wrong here. It would be nice if someone could point me in the right direction.

In reply to Taint check tripped since perl 5.10 by Anonymous Monk

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":



  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.