> > - IncludesDir config now works with DynamicIncludes.
> >
> > + DebugBufferLength feature added, giving control to
> > how much buffered output get's shown when debugging errors.
> >
>
> HI.
> I upgraded Apache::ASP to latest
> and put PerlTaintCheck On in httpd.conf
>
> when I run script using mod_perl
> I got in error in log file like this
> Thu Nov 18 14:46:57 1999] [error] Insecure dependency in eval while
> running with -T switch at /usr/lib/perl5/MLDBM/Serializer/Data/Dumper.pm
> line 51, <DATA>
> chunk 239.
>
> before this virsion I also has error (if used PerlTaintCheck), but
> that was in Apache::ASP relating to perl bild in sdbm,
> now that one is gone.
>
> I am using Apache-1.3.9 (as DSO)
> more_perl -1.21
> linux debian ,
> perl-5.005_03
>
> Slava.
Slava,
Here's an faq item from: http://www.nodeworks.com/asp/faq.html
<snip>
Apache::ASP automatically untaints data internally so that you may run scripts with
PerlTaintCheck On, but if you are using state objects like $Session or $Application,
you must also notify MLDBM, which Apache::ASP uses internally, to also untaint data
read from disk, with this setting:
$MLDBM::RemoveTaint = 1;
You could put the above line in your global.asa, which is just like a perl module,
outside any event handlers you define there.
</snip>
Try it. I left this up to you to do because untainting data
from state files stored on disk implies that you understand
the risks involved.
-- Joshua
_________________________________________________________________
Joshua Chamas Chamas Enterprises Inc.
NodeWorks >> free web link monitoring Huntington Beach, CA USA
http://www.nodeworks.com 1-714-625-4051
