[Catalyst] user input is evil : validation vis a vis taint checking
Len Jaffe
lenjaffe at jaffesystems.com
Wed May 3 23:13:22 CEST 2006
We don't do much discussion of CGI parameter taint
checking any more... Did we as a web development
community reach a consensus while I was in the
bathroom?
Is the use of a FormValidator-esqe module tantamount
to sufficiently checking the taintedness of user
input, or are we *just* not talking about it anymore?
Thanks.
Len.
More information about the Catalyst
mailing list