in reply to Re^2: Taint, CGI and perl 5.10
in thread Taint, CGI and perl 5.10

perldoc perl595delta says

When perl is run under taint mode, printf() and sprintf() will now reject any tainted format argument.