Re^2: unlink taint

You are mistaken.

$ perl -MScalar::Util=tainted -TE'say tainted($_) for glob "*"'
1
1
1
1
[download]

glob is a source of external input when "*" is used. Same goes for readdir.

$ perl -MScalar::Util=tainted -TE'opendir(my $dh, "."); say tainted($_
+) for readdir($dh)'
1
1
1
1
1
1
[download]

Comment on Re^2: unlink taint Select or Download Code

Replies are listed 'Best First'.
Re^3: unlink taint by Anonyrnous Monk (Hermit) on Dec 20, 2010 at 22:57 UTC
glob is a source of external input when "" is used.* You're right. A quick test shows, though, that it doesn't matter whether there's a '*' in the glob expression or not: `$ perl -MScalar::Util=tainted -TE'say tainted($_) for glob "foo"' 1` [download]	[reply] [d/l]
Re^4: unlink taint by ikegami (Patriarch) on Dec 20, 2010 at 23:11 UTC
Interesting, thanks.	[reply]