[index] [text page] [<<start] [<prev] [next>] [last>>]
Page 41: Taint mode (cont)

Page 41

  
  Taint mode (cont)
  Whenever input comes from outside your program and will go to another program, it needs to be untainted.
    $ perl -T 
    $text = <STDIN>;
    system "echo $text";
    <ctrl-d>
    Insecure dependency in system while running with -T switch

Copyright 2003, Bri Hatch of Onsight, Inc.

Presented at SPUG, 2003.

Presentation created using vim and MagicPoint.