Taint check

Colin Bendell cbendell at point2.com
Wed May 28 21:50:08 UTC 2003


> -----Original Message-----
> From: Bradley Baetz [mailto:bbaetz at acm.org]
> Sent: Wednesday, May 28, 2003 3:07 PM
> On Wed, May 28, 2003 at 08:55:20AM -0600, Colin Bendell wrote:
> >
> > Yes, and this seems to be the problem.  I'm using ActiveState's
> > perlis.dll to execute the perl cgi which doesn't support the taint
check
> > (because it is loaded early).
> 
> Really? Not even with an option? Does the IIS persistence stuff work?
> Dont we have the same issue swith global variables that we do with
> mod_perl?

As far as I know there aren't any global options available for the isapi
plugin perlis.dll .  If I switch to using the perl executable, then
certainly I can specify a global taint check setting.  

I've read that some admin components don't work with the global taint
setting turned on.  Is this correct? If so, which pages are these?





More information about the developers mailing list