Re: Runtime Taint Enable

I forgot who called taint "the most global of global variables", but to my knowledge, there's no way to turn it off. I can think of a couple of clean ways to detect it, though:

Newer versions of Perl have ${^TAINT} that reflects whether taint mode is on; check perlvar.

If your perl doesn't have it, you can use Scalar::Util, which has a tainted function.

Do not rebuke them with harsh words ... but rather lead them gently - with URLs - so that they may learn wisdom.

Comment on Re: Runtime Taint Enable Select or Download Code

Replies are listed 'Best First'.
Re^2: Runtime Taint Enable by Rhandom (Curate) on Feb 23, 2005 at 23:29 UTC
I wasn't aware of ${^TAINT} - that is nice. Any of the modules that have an is_tainted function can be passed known "bad data" such as join("",$0,%ENV,@ARGV) or a few characters from /dev/urandom. But each of these is_tainted functions have to probe by trying to do something bad. Some use eval "#$baddata", others try and do kill 0 * $baddata. It would be nicer to just check the flag. It would be even nicer if I can set the flag to on (knowing I can't turn it off). I think I'll go give it a try. `perl -T -e 'print "(${^TAINT})\n";'` [download] Works on perl 5.8.5 but not on 5.6.0. my @a=qw(random brilliant braindead); print $a[rand(@a)];	[reply] [d/l]

Replies are listed 'Best First'.

Re^2: Runtime Taint Enable
by Rhandom (Curate) on Feb 23, 2005 at 23:29 UTC

perl -T -e 'print "(${^TAINT})\n";'
[download]

my @a=qw(random brilliant braindead); print $a[rand(@a)];

[reply]
[d/l]