in reply to Re^2: Taint, CGI and perl 5.10in thread Taint, CGI and perl 5.10
perldoc perl595delta says
When perl is run under taint mode, printf() and sprintf() will now reject any tainted format argument.