|
Posted by Big and Blue on October 13, 2008, 7:22 pm
Please log in for more thread options
Jim Carlock wrote:
>
> I'm prepared to state that mod_perl does NOT use and can NOT use
> PertTaintCheck.
Should be fairly easy to confirm. Just write some code that would fail
taint checking and load it into mod_perl at Apache startup. Then look
for errors. If there are some it works, if there aren't it doesn't.
> It appears that Apache uses PerlTaintCheck to call
> Perl.exe with specific parameters.
??? I only ever use Unix/Linux with mod_perl so may be barking up the
wrong tree here, but why would perl.exe be involved? I'd expect it to
be using the shared library (perl*.dll) rather then any executable.
--
Just because I've written it doesn't mean that
either you or I have to believe it.
| 
XML Sitemap