Page Information

Title:	IDS01-PL. Use taint mode while being aware of its limitations
Author:	David Svoboda	Jul 06, 2012
Last Changed by:	Will Snavely	Nov 16, 2017
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/eFxMBQ
Export As:	Word · PDF

Parent Page     Page: Rec. 01. Input Validation and Data Sanitization (IDS)

• recommendation
• ids

Time	Editor
Nov 16, 2017 14:45	Will Snavely	View Changes
Mar 31, 2015 18:27	Will Snavely	View Changes
Mar 31, 2015 18:07	Will Snavely	View Changes
Mar 26, 2015 20:56	Will Snavely	View Changes
Mar 26, 2015 19:04	Will Snavely

External Links (12)
    perldoc.perl.org/perlsec.html
    stackoverflow.com/questions/2228457/is-perls-taint-mode-use…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    mailto:gunther@clark.net
    search.cpan.org/dist/DBI/DBI.pm#TaintIn
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    stackoverflow.com
    search.cpan.org/dist/CGI/lib/CGI.pm
    www.oreillynet.com/onlamp/blog/2006/11/perls_taint_mode_to_…
    www.stonehenge.com/merlyn/UnixReview/col33.html
    gunther.web66.com/FAQS/taintmode.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…

SEI CERT Perl Coding Standard (5)     Page: IDS33-PL. Sanitize untrusted data passed across a trust boundary     Page: IDS32-PL. Validate any integer that is used as an array index     Page: AA. Bibliography     Home page: SEI CERT Perl Coding Standard     Page: FIO01-PL. Do not operate on files that can be modified by untrusted users