in reply to Re^3: How to do regex backreferences within $variable replacement text?
in thread How to do regex backreferences within $variable replacement text?

A better would be to look through the string they send you and check for potentially harmful substitutions

Better than that is to filter everything except known-good characters, like we do when untainting data. In fact, the OP program should run under taint mode.

--
David Serrano

  • Comment on Re^4: How to do regex backreferences within $variable replacement text?