Re: Opening a pipe when taint mode is enabled (was: Send email using SMTP)

2009-01-10 Thread Adam Jimerson
Gunnar Hjalmarsson wrote: Adam Jimerson wrote: According to perlsec I need to use it as a key in a hash or reference a substring. The example given is ,[ ] if ($data =~ /^([...@\w.]+)$/) { $data = $1; # $data now untainted } else { die Bad data in '$data'; # log this

Re: Opening a pipe when taint mode is enabled (was: Send email using SMTP)

2009-01-10 Thread Mike Williams
On Fri, Jan 9, 2009 at 6:30 PM, Adam Jimerson vend...@charter.net wrote: Gunnar Hjalmarsson wrote: Adam Jimerson wrote: According to perlsec I need to use it as a key in a hash or reference a substring. The example given is ,[ ] if ($data =~ /^([...@\w.]+)$/) { $data =

Opening a pipe when taint mode is enabled (was: Send email using SMTP)

2009-01-09 Thread Gunnar Hjalmarsson
Adam Jimerson wrote: Gunnar Hjalmarsson wrote: There is only one suspected variable to consider, i.e. $name, which is probably tainted. Untaint it, and you are done. ( You remember where to find out how, right? ;-) ) According to perlsec I need to use it as a key in a hash or reference a