Re: [MacPerl] taint checks and CGI.pm

[pudge@pobox.com (Chris Nandor)]

At 16.20 12/27/97, Karsten Meier wrote:
>BEGIN {
>        unshift @INC, "$ENV{MACPERL}lib:MacPPC:","$ENV{MACPERL}lib:"
>}


>I needed to write
>BEGIN {
>        unshift @INC, "work:MacPerl Ä:lib:MacPPC:","work:MacPerl Ä:lib:"
>}
>to get my script working.

>I'm still wonder why "use CGI" was secure,
>but the eval in autoload not.
>
>Has anybody experiences with this?

I have not seen it before.  I just checked it out, and you are right, it
bails on all AUTOLOADed routines, not just with CGI.pm, either.  Hm.  I'll
look into it, hopefully someone else can, too.  Best thing is to come up
with a solution similar to the first one that is portable, but works as
well as the second one.  Perhaps finding out why the second one works and
the first does not is the first step.

--
Chris Nandor               pudge@pobox.com           http://pudge.net/
%PGPKey=('B76E72AD',[1024,'0824 090B CE73 CA10  1FF7 7F13 8180 B6B6'])
#==                    MacPerl: Power and Ease                     ==#
#==    Publishing Date: Early 1998. http://www.ptf.com/macperl/    ==#



***** Want to unsubscribe from this list?
***** Send mail with body "unsubscribe" to mac-perl-request@iis.ee.ethz.ch