in reply to Re^2: CGI::Session, taint mode, and tainted session file input data
in thread CGI::Session, taint mode, and tainted session file input data

Could you subclass Storable, and override the deserialization methods so that detainting is done before calling the SUPER method? (Of course, this assumes that you can specify your subclass as an alternative serializer module.)

the lowliest monk

  • Comment on Re^3: CGI::Session, taint mode, and tainted session file input data

In Section Seekers of Perl Wisdom