in reply to quotewords and qq{}/q{}
Is your user input coming at you as a perl expression to be evaled, or does q{} or qq{} get evaluated in the user's process before you see it?
In the second case, there is no difference between qq{} and "" or q{} and ''.
In the first, you're trusting your users more than you ought to.
After Compline,
Zaxo
|
|---|
| Replies are listed 'Best First'. | |
|---|---|
|
Re: quotewords and qq{}/q{}
by jonadab (Parson) on Jan 27, 2007 at 17:23 UTC | |
by greatdane (Beadle) on Jan 31, 2007 at 02:12 UTC |