Re:Perl Already Won
by nemo on Sunday January 18, 2015 @03:21PM
(#8908707)
If you were a developer familiar with Perl you'd hopefully at least test with perl -T
If you had no familiarity with Perl I could see you getting bit by that. After you'd learned enough to be proficient enough to be writing code taking actual user input in a production env. you should really know about that issue since it's discussed in the Perl dev. community often enough. Also by that point you should be at a minimum testing any and all code taking actual user input with taint mode which would point out that problem immediately.
If you had no familiarity with Perl I could see you getting bit by that. After you'd learned enough to be proficient enough to be writing code taking actual user input in a production env. you should really know about that issue since it's discussed in the Perl dev. community often enough. Also by that point you should be at a minimum testing any and all code taking actual user input with taint mode which would point out that problem immediately.
If you read the docs, you wouldn't have that bug: http://perldoc.perl.org/perlsec.html