Insecure dependency in parameter 1 of DBI::st=HASH(0x19dd70)->FETCH method call while running with -T switch
sub trick_taint { require Carp; Carp::confess("Undef to trick_taint") unless defined $_[0]; my $match = $_[0] =~ /^(.*)$/s; $_[0] = $match ? $1 : undef; return (defined($_[0])); }
使用方法:
my $xxx = trim($cgi->param('xxx')); trick_taint($xxx);
当执行外部Perl脚本的时候出现下面的错误
Insecure dependency in `` while running with -T
解决方法
trick_taint($cl); $ENV{'PATH'} = '/bin:/usr/bin'; delete @ENV{'IFS', 'CDPATH', 'ENV', 'BASH_ENV'}; my @logs = qx($cl);
http://perldoc.perl.org/perlsec.html#Taint-mode