From: Rafael Garcia-Suarez Date: Mon, 6 Dec 2004 21:54:55 +0000 (+0000) Subject: Small addition to perlsec by Stas Bekman. X-Git-Url: http://git.shadowcat.co.uk/gitweb/gitweb.cgi?a=commitdiff_plain;h=6a268663dbef8fda276c2b7ace6743802fd550ca;p=p5sagit%2Fp5-mst-13.2.git Small addition to perlsec by Stas Bekman. p4raw-id: //depot/perl@23619 --- diff --git a/pod/perlsec.pod b/pod/perlsec.pod index 3174450..dd237a0 100644 --- a/pod/perlsec.pod +++ b/pod/perlsec.pod @@ -234,6 +234,11 @@ The benefit of using C<-Mlib=/foo> over C<-I/foo>, is that the former will automagically remove any duplicated directories, while the later will not. +Note that if a tainted string is added to C<@INC>, the following +problem will be reported: + + Insecure dependency in require while running with -T switch + =head2 Cleaning Up Your Path For "Insecure C<$ENV{PATH}>" messages, you need to set C<$ENV{'PATH'}> to