in reply to Re^2: Security issue and solution for terminal command accessed by public user
in thread Security issue and solution for terminal command accessed by public user
It is the safest way.
If you trust the quoting modules to handle everything a malicious user might throw at it, buffer overflow attempts and all the other 'ploits the devious minds must expend hundreds of hours dreaming up, go for it.
I'm not the paranoid type, but I see the ongoing arms race seemingly undampened by the millions of dollars and thousands of hours of expertise that large organisations like MS, Google, Apple et al. throw at similar problems. Am I going to trust the efforts of a lone CPAN author, given that the bad guys have only to download the module to look inside to search for weaknesses?
When the alternative is safer and actually easier, why risk it.
|
|---|