develooper Front page | perl.perl5.porters | Postings from October 2012

Re: No-taint support in Perl

Thread Previous | Thread Next
From:
Steffen Schwigon
Date:
October 22, 2012 12:26
Subject:
Re: No-taint support in Perl
Message ID:
878vay48ce.fsf@renormalist.net
Alexander Hartmaier <alex.hartmaier@gmail.com> writes:
> Taint mode is a feature that distinguishes Perl from other dynamic
> languages which might be a good thing.

Indeed.


> On the other hand who really uses it to increase security?

You don't need it always, but once you need to write a program with
security in mind it is an extremely helpful tool.


> [...]
> But if it doesn't make sense any more because most data doesn't come
> from disk but the network today it might be a better idea to
> deprecated it (slowly as usual).

-1

I'm for the compile time option that is discussed here - but I am
strongly against a deprecation of such a powerful feature.

Kind regards,
Steffen 
-- 
Steffen Schwigon <ss5@renormalist.net>
Perl benchmarks <http://perlformance.net>
Dresden Perl Mongers <http://dresden-pm.org/>

Thread Previous | Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About