Security aware programming(15)

• Miscellaneous other stuff (cont'd):

  • chroot(), but needs to be started as root
  • Safe module
  • be careful with eval($var)

• Some popular extensions and taint mode:

  • CGI.pm: form data becomes tainted
  • DBI.pm: supports taint mode
  • Apache mod_perl: PerlTaintCheck On