in reply to Re^3: How to do regex backreferences within $variable replacement text?
in thread How to do regex backreferences within $variable replacement text?
A better would be to look through the string they send you and check for potentially harmful substitutions
Better than that is to filter everything except known-good characters, like we do when untainting data. In fact, the OP program should run under taint mode.
--
David Serrano
|
|---|