I am running a perl handler in apache 2.2.11 / mod_perl 2.0.4 / perl 5.10.0 (debian lenny). Since I updated from etch / apache 2.2.9 / perl 5.8.8 yesterday I am getting the following warnings in my handler (the handler itself is unchanged):
Insecure dependency in require while running with -t switch
Insecure dependency in eval while running with -t switch
The routine where the warnings occur just contains an eval() using Safe.pm (permitting only very basic operations). I untaint the code before eval'ing.
According to perlsec the "Insecure dependency in require" occurs when there is a tainted value in @INC. Since I dont change @INC in my handler and the eval() doesnt contain any use(), require() or do(), I dont understand whats wrong here.
It would be nice if someone could point me in the right direction.