-T breaks LWP 2.003
Randal Schwartz (merlyn@stonehenge.com)
11 Oct 1996 17:54:24 -0700
Apparently, LWP is using some part of the requested URL to do
something external, cuz if it comes from the outside world, I get a bad
abort.
$ echo http://www.stonehenge.com | perl -MLWP::Simple -lne 'getprint($_)'
[ works OK ]
$ echo http://www.stonehenge.com | perl -T -MLWP::Simple -lne 'getprint($_)'
[ ... ]
<H1>An Error Occurred</h1>
501 - Insecure dependency in require while running with -T switch, <> chunk 1.
[ ... ]
This shouldn't be. Should I be required to untaint the URL, or should
I just require LWP to do it? Is it related to the eval{require "$_"}
block I saw in LWP/Protocol.pm?
--
Name: Randal L. Schwartz / Stonehenge Consulting Services (503)777-0095
Keywords: Perl training, UNIX[tm] consulting, video production, skiing, flying
Email: <merlyn@stonehenge.com> Snail: (Call) PGP-Key: (finger merlyn@ora.com)
Web: <A HREF="http://www.stonehenge.com/merlyn/">My Home Page!</A>
Quote: "I'm telling you, if I could have five lines in my .sig, I would!" -- me