perllocale
tells use that: \l
, \L
, \u
or \U
)Result string containing interpolated material is tainted if use locale
is in effect.
m//
):Subpatterns, either delivered as a list-context result or as $1 etc. are tainted if use locale
is in effect, and the subpattern regular expression contains \w
(to match an alphanumeric character), \W
(non-alphanumeric character), \s
(whitespace character), or \S
(non whitespace character). The matched-pattern variable, $&, $` (pre-match), $' (post-match), and $+ (last match) are also tainted if use locale
is in effect and the regular expression contains \w
, \W
, \s
, or \S
.
s///
):Has the same behavior as the match operator. Also, the left operand of =~
becomes tainted when use locale
in effect if modified as a result of a substitution based on a regular expression match involving \w
, \W
, \s
, or \S
; or of case-mapping with \l
, \L
,\u
or \U
.
Results are tainted if use locale
is in effect.
Sandbox::untaintUnchecked
. But I suspect there
are other places in the code where these taint errors are lurking.
-- CrawfordCurrie - 18 Sep 2009 Summary | Enabling LINKTOOLTIPINFO causes taint error |
ReportedBy | KennethLavrsen |
Codebase | |
SVN Range | Foswiki-1.0.6, Sun, 21 Jun 2009, build 4272 |
AppliesTo | Engine |
Component | |
Priority | Urgent |
CurrentState | Closed |
WaitingFor | |
Checkins | distro:ebd7d951aac0 distro:40895c0028ad |
TargetRelease | patch |
ReleasedIn | 1.0.7 |