in reply to Re: Could we get a more systematic approach to security in perl?
in thread Could we get a more systematic approach to security in perl?

I absolutely understand that taint mode does not capture everything but it does capture a lot, and as far as I know has no drawbacks save the fact that too many modules were not written with it in mind. I believe it to be a useful tool.

Actually I my emphasis was not actually on taint, but can people take more interest in a systematic approach to security and learn form security practices in other languages as described in OWASP? One OWASP principle is "Defence in depth". As such why through away one possible line of defence?

  • Comment on Re^2: Could we get a more systematic approach to security in perl?