Re: PERL's -e check

[Pavel Kankovsky <peak () ARGO TROJA MFF CUNI CZ>]

On Sun, 24 Dec 2000, Joe Testa wrote:

>       I've noticed here and there that some PERL scripts pass user input
> directly into an open() call protected by a "-e" check.  Example:

What about a filename denoting some secret file (whose contents would
be leaked if such a file was processed by the script)? Or some special
directory entry (like a named pipe, /dev/fd/X etc...leading to a
disruption of some service)?

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."