Is Perl's taint mode useful?

前端 未结 6 1423
再見小時候
再見小時候 2021-01-01 11:43
perl -T

Do you use it? Does it help you finding security holes in your Perl scripts?

6条回答
  •  执念已碎
    2021-01-01 12:04

    The "Secure Programming Techniques" chapter of Mastering Perl is almost completely devoted to taint checking and how you should use it.

    Many people will tell you it protects you, but they subtly lie about that. It's a developer tool that helps you find some (only some) spots in your code where you need to be careful. It's not going to solve all of your security problems.

提交回复
热议问题