develooper Front page | perl.perl5.porters | Postings from October 2012

Re: No-taint support in Perl

Thread Previous | Thread Next
From:
David Golden
Date:
October 22, 2012 10:29
Subject:
Re: No-taint support in Perl
Message ID:
CAOeq1c8e_APVKCeYGHC=L=2=9aQ6DTZiFi5z4szbMgNCsiezEA@mail.gmail.com
On Mon, Oct 22, 2012 at 7:37 AM, Ed Avis <eda@waniasset.com> wrote:
>
> If you really know what you're doing and you want to just ignore these flags,
> running with taint turned off even though it was specified on the command line,
> then this can trivially be done by writing a script that wraps the perl
> executable.  IMHO, it is better to do it that way rather than adding the
> dangerous ignore-taint feature to the perl binary itself.

You don't understand the patch.

The *cost* of taint checks exists in the source regardless of whether
taint is turned *on*.  There are a number of places that effectively
have a "is taint on? if so do X" code path.
The patch would compile out all those conditional checks.

Wrapping wouldn't do anything.

David

-- 
David Golden <xdg@xdg.me>
Take back your inbox! → http://www.bunchmail.com/
Twitter/IRC: @xdg

Thread Previous | Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About