in reply to "one tainted value taints the whole expression"

I think it has to do with optimization, since "the foo" is a string constant, it doesn't get flagged as tainted, where as "the $foo" and $bar do get tainted. In either case, it doesn't matter, taint does its job :)
  • Comment on Re: "one tainted value taints the whole expression"

Replies are listed 'Best First'.
Re^2: "one tainted value taints the whole expression"
by duelafn (Parson) on Oct 14, 2008 at 22:26 UTC

    $foo, $bar, and "the $foo" are not tainted. Try appending the following to the script:

    print "5. tainted\n" if tainted($bar);
print "6. tainted\n" if tainted("the $foo");

    [download]

    Neither line prints.

    Good Day,
        Dean

[reply]
[d/l]
      trust to do what?
[reply]

In Section Seekers of Perl Wisdom