3 ms·
"The Safe module does not implement an effective sandbox for evaluating untrusted code with the perl interpreter." https://perldoc.perl.org/Safe https://perldo
by blacksqr 5y ago
"The Safe module does not implement an effective sandbox for evaluating untrusted code with the perl interpreter."
https://perldoc.perl.org/Safe https://perldoc.perl.org/Safe
- tyingq 5y agoYeah, though in this case, whitelisting opcodes probably would have at least avoided qx and ``(both exec()). Avoiding the eval() altogether would be the right path, of course.