in reply to Re^2: use re 'taint' with s/// operator
in thread use re 'taint' with s/// operator

there isn't such a thing as "untainting".

Really?

"Untainting" variables just means assigning an untainted value to it.

There you go, you just defined it.

Hint. It's the value that tainted, not the variable.

  • Comment on Re^3: use re 'taint' with s/// operator

Replies are listed 'Best First'.
Re^4: use re 'taint' with s/// operator
by JavaFan (Canon) on Nov 19, 2010 at 19:08 UTC
    "Untainting" variables just means assigning an untainted value to it.
    Hint. It's the value that tainted, not the variable.
    Hint. If I write untainted value, I know.
[reply]
      "Untainting" variables just means assigning an untainted value to it.
      Hint. It's the value that tainted, not the variable.
      Hint. If I write untainted value, I know.

      Hint: Look back. You'll see that you were the first & only one to mention "Untainting" variables.

      As for your "Really? In Perl land, there isn't such a thing as "untainting"., I guess you'd best re-read perlsec:

      The lesson is that when untainting, you must be exceedingly careful with your patterns. Laundering data using regular expression is the only mechanism for untainting dirty data, ...
      Examine what is said, not who speaks -- Silence betokens consent -- Love the truth but pardon error.
      "Science is about questioning the status quo. Questioning authority".
      In the absence of evidence, opinion is indistinguishable from prejudice.
[reply]
        perlsec is wrong.
[reply]

In Section Seekers of Perl Wisdom