From: Jarkko Hietaniemi <jhi@iki.fi>
Date: Sun, 24 Feb 2002 19:45:43 +0000 (+0000)
Subject: Document the new taint behaviour of exec LIST and
X-Git-Url: http://git.shadowcat.co.uk/gitweb/gitweb.cgi?a=commitdiff_plain;h=4956848ff7879667129e0579e64c474ca6097eb0;p=p5sagit%2Fp5-mst-13.2.git

Document the new taint behaviour of exec LIST and
system LIST.

p4raw-id: //depot/perl@14854
---

diff --git a/pod/perldelta.pod b/pod/perldelta.pod
index 74c1ce6..52f9315 100644
--- a/pod/perldelta.pod
+++ b/pod/perldelta.pod
@@ -485,6 +485,15 @@ This is not a substitute for -T.>
 
 =item *
 
+In other taint news, the C<exec LIST> and C<system LIST> have now been
+considered too risky (think C<exec @ARGV>: it can start any program
+with any arguments), and now the said forms cause a warning.
+You should carefully launder the arguments to guarantee their
+validity.  In future releases of Perl the forms will become fatal
+errors so consider starting laundering now.
+
+=item *
+
 If tr/// is just counting characters, it doesn't attempt to
 modify its target.