Skip to content

Commit

Permalink
perlsec: minor taint edit
Browse files Browse the repository at this point in the history
Paragraph signalling option to disable taint landed in the middle
of another sentence, breaking it.
  • Loading branch information
hvds committed Oct 25, 2023
1 parent 22edd37 commit a561113
Showing 1 changed file with 7 additions and 6 deletions.
13 changes: 7 additions & 6 deletions pod/perlsec.pod
Expand Up @@ -45,7 +45,13 @@ these. Other checks, however, are best supported by the language itself,
and it is these checks especially that contribute to making a set-id Perl
program more secure than the corresponding C program.

You may not use data derived from outside your program to affect
Support for taint checks adds an overhead to all Perl programs,
whether or not you're using the taint features.
Perl 5.18 introduced C preprocessor symbols that can
be used to disable the taint features.

When taint is enabled,
you may not use data derived from outside your program to affect
something else outside your program--at least, not by accident. All
command line arguments, environment variables, locale information (see
L<perllocale>), results of certain system calls (C<readdir()>,
Expand All @@ -56,11 +62,6 @@ Tainted data may not be used directly or indirectly in any command
that invokes a sub-shell, nor in any command that modifies files,
directories, or processes, B<with the following exceptions>:

Support for taint checks adds an overhead to all Perl programs,
whether or not you're using the taint features.
Perl 5.18 introduced C preprocessor symbols that can
be used to disable the taint features.

=over 4

=item *
Expand Down

0 comments on commit a561113

Please sign in to comment.