On Thu, May 21, 2009 at 07:23:55AM +0000, Matt Sergeant wrote: > I guess this raises a question: The return values from config() are > tainted. Should we de-taint them?
I think so. Integrity of the config files is an issue handled much higher up, not by taint checks way down in plugins. -- Devin \ aqua(at)devin.com, IRC:Requiem; http://www.devin.com Carraway \ 1024D/E9ABFCD2: 13E7 199E DD1E 65F0 8905 2E43 5395 CA0D E9AB FCD2
