Security aware programming(6)

• Turn on taint mode: #!/usr/bin/perl -T

• New E)rrors and F)ixes:

  • E: Insecure $ENV{PATH} while running with -T ...
  • F: $ENV{'PATH'} = '/bin:/usr/bin';
  • E: Insecure dependency in system while running ...
  • F1: system "echo", $v; # note: $v still tainted!
  • F2: untaint $v (preferred)