> $fp =~ /(.*)/;

This doesn't untaint $fp.

instead, you could do this:

  ( $fp )=( $fp =~ /(.*)/ );

To untaint a variable using this method, you need to assign the result
of a regex capture to the variable, not just do a regex check

Clint

Reply via email to