Re^2: Taint, CGI and perl 5.10

I will try to cut the code down to the smallest instance where the problem still occurs and repost in a bit. Essentially the problem is this:

using perl 5.8
code working with taint mode turned on, file name comes from user, untainted by code and tainted information written to file successfully.
upgrade to 5.10
code now broken with 'insecure dependency...' error
only way to fix is to untaint the information written to the file. Nothing else changed.

I pass a file handle and the tainted information to a subroutine that does the output. I don't know if that makes a difference. Back in a bit with code sample.

Comment on Re^2: Taint, CGI and perl 5.10

Replies are listed 'Best First'.
Re^3: Taint, CGI and perl 5.10 by ikegami (Patriarch) on Mar 11, 2010 at 03:17 UTC
The above does exactly what you said except it gives no error with 5.10.0.	[reply]