| Subject: | LWPx-ParanoidAgent-1.02 does not work with taint checks activated... |
You'd think that a "paranoid" module would be compatible with Perl's
(the language) taint checks... Apparently not!
(I'm having to go and do some traveling tomorrow, and won't have access
to my computer for a month plus, but will be able to pick up e-mail and
will look into this. If I have a patch before Saturday 7am GMT+9, I'll
e-mail it to you.)
The output from the attached script illustrates this:
D:\Curtis\cgi-bin>perl test.pl
LWP::UserAgent: OK ($@ = "")
LWPx::ParanoidAgent: OK ($@ = "")
D:\Curtis\cgi-bin>perl -T test.pl
LWP::UserAgent: OK ($@ = "")
LWPx::ParanoidAgent: ERROR: "Insecure dependency in connect while
running with -T switch"
D:\Curtis\cgi-bin>perl -v
This is perl, v5.8.8 built for MSWin32-x86-multi-thread
(with 25 registered patches, see perl -V for more detail)
Copyright 1987-2006, Larry Wall
Binary build 817 [257965] provided by ActiveState http://www.ActiveState.com
Built Mar 20 2006 17:54:25
...
D:\Curtis\cgi-bin>ver
Microsoft Windows XP [Version 5.1.2600]
(Service pack 2 + all security patches, but that shouldn't matter at
this level.)
| Subject: | test.pl |
#!perl
#test.pl
use Carp;
BEGIN { $Carp::Verbose = 1; }
require LWP::UserAgent;
my $ua = LWP::UserAgent->new;
my $response = $ua->get('http://search.cpan.org/');
print "LWP::UserAgent: ";
if ($response->is_success) {
print "OK (\$\@ = \"$@\")\n";
}
else {
print "ERROR: \"$@\"\n";
}
require LWPx::ParanoidAgent;
$ua = LWPx::ParanoidAgent->new;
$response = $ua->get('http://search.cpan.org/');
print "LWPx::ParanoidAgent: ";
if ($response->is_success) {
print "OK (\$\@ = \"$@\")\n";
}
else {
print "ERROR: \"$@\"\n";
}
exit;
__END__