not sure if everyone here pays attention to perl.com on a daily basis, but Paul Lindner's article on Apache::TaintRequest showed up yesterday...
from the perl.com email newsletter... Cross-site scripting attacks are a surprisingly little-known and surprisingly dangerous problem for anyone writing dynamic web content. Paul Lindner, author of the mod_perl Cookbook tells us what cross-site scripting is all about, and how we can use a little bit of mod_perl magic to avoid it. http://www.perl.com/pub/a/2002/02/20/css.html --Geoff