develooper Front page | perl.perl5.porters | Postings from October 2012

Re: No-taint support in Perl

Thread Previous | Thread Next
From:
Andy Dougherty
Date:
October 21, 2012 09:30
Subject:
Re: No-taint support in Perl
Message ID:
alpine.DEB.2.02.1210211224320.22920@fractal.phys.lafayette.edu
On Sun, 21 Oct 2012, Steffen Mueller wrote:

> Two compromises that would make sense to me:
> 
> 1) Only support a configure flag for the variant where -t/-T is fatal. Keep
> the Perl-internal, undocumented (but obviously named) define so that whoever
> wants to use the silent variant doesn't have to maintain patches against Perl
> or if anything, only patches that are limited to very simple and localized
> changes.
> 
> 2) Support two variants in Configure: fatal and warning (no silent variant).
> 
> Both compromises are perfectly fine with me.
> 
> Does that make sense?

I don't think any explicit Configure support is needed at all.  You could 
always add extra cflags by calling Confgure with

    -Accflags='-DPERL_NO_TAINT' (or whatever the flags are).

To me, that feels like the right level of hoop to have to jump through.

-- 
    Andy Dougherty		doughera@lafayette.edu

Thread Previous | Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About