[Catalyst] [Catatalyst] Catalyst and Taint mode

Christopher H. Laco claco at chrislaco.com
Wed Dec 28 18:05:05 CET 2005


JOUANNE Mickael wrote:
> Hi.
> 
> Today I try to have taint mode in my App.
> But when I set "PerlTaintCheck on" in my httpd.conf, I got this error :
> 
> [Wed Dec 28 16:54:54 2005] [error] Couldn't load
> "MyApp::Controller::News", "Insecure dependency in require while
> running with -T switch at
> /usr/local/lib/perl5/site_perl/5.8.7/Module/Pluggable/Fast.pm line
> 82.\n" at /usr/local/lib/perl5/site_perl/5.8.7/Module/Pluggable/Fast.pm
> line 84.\nCompilation failed in require at (eval 4) line 3.\n
> 
> Is it normal ?
> What I have to do for having Taint mode in Catalyst ?
> 
> Thanks.
> 

Fix Module::Pluggable::Fast.

I had the same problem with Module::Pluggable (2.8) in Handel and
submitted a patch for it. It's basically untainting file names...

-=Chris

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3178 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.rawmode.org/pipermail/catalyst/attachments/20051228/4ec7b928/smime-0001.bin


More information about the Catalyst mailing list