On Tue, 16 Apr 2002, Stas Bekman wrote:
> > +($tmpfile) = $tmpfile =~ /^([^<>|;*]+)$/; #untaint
>
> Doug, will this do the right thing on all platform? I'm simply looking for
> a similar solution to a bug in Cwd.pm to generically untaint a path.
> Shouldn't '?\[\]' be in the forbidden
> +($tmpfile) = $tmpfile =~ /^([^<>|;*]+)$/; #untaint
Doug, will this do the right thing on all platform? I'm simply looking for
a similar solution to a bug in Cwd.pm to generically untaint a path.
Shouldn't '?\[\]' be in the forbidden set? These are all parts of the
wild chars set (at
