Change 14854 by jhi@alpha on 2002/02/24 19:45:43
Document the new taint behaviour of exec LIST and
system LIST.
Affected files ...
.... //depot/perl/pod/perldelta.pod#285 edit
Differences ...
==== //depot/perl/pod/perldelta.pod#285 (text) ====
Index: perl/pod/perldelta.pod
--- perl/pod/perldelta.pod.~1~ Sun Feb 24 13:00:05 2002
+++ perl/pod/perldelta.pod Sun Feb 24 13:00:05 2002
@@ -485,6 +485,15 @@
=item *
+In other taint news, the C<exec LIST> and C<system LIST> have now been
+considered too risky (think C<exec @ARGV>: it can start any program
+with any arguments), and now the said forms cause a warning.
+You should carefully launder the arguments to guarantee their
+validity. In future releases of Perl the forms will become fatal
+errors so consider starting laundering now.
+
+=item *
+
If tr/// is just counting characters, it doesn't attempt to
modify its target.
End of Patch.
