view release on metacpan or  search on metacpan

ppport.h  view on Meta::CPAN

PERL_MAGIC_shared|5.007003||p
PERL_MAGIC_sigelem|5.007002||p
PERL_MAGIC_sig|5.007002||p
PERL_MAGIC_substr|5.007002||p
PERL_MAGIC_sv|5.007002||p
PERL_MAGIC_taint|5.007002||p
PERL_MAGIC_tiedelem|5.007002||p
PERL_MAGIC_tiedscalar|5.007002||p
PERL_MAGIC_tied|5.007002||p
PERL_MAGIC_utf8|5.008001||p
PERL_MAGIC_uvar_elem|5.007003||p

ppport.h  view on Meta::CPAN

PL_stdingv|5.004050||p
PL_sv_arenaroot|5.004050||p
PL_sv_no|5.004050||pn
PL_sv_undef|5.004050||pn
PL_sv_yes|5.004050||pn
PL_tainted|5.004050||p
PL_tainting|5.004050||p
PL_tokenbuf|5.011000||p
POP_MULTICALL||5.011000|
POPi|||n
POPl|||n
POPn|||n

ppport.h  view on Meta::CPAN

docatch|||
doeval|||
dofile|||
dofindlabel|||
doform|||
doing_taint||5.008001|n
dooneliner|||
doopen_pm|||
doparseform|||
dopoptoeval|||
dopoptogiven|||

ppport.h  view on Meta::CPAN

magic_getnkeys|||
magic_getpack|||
magic_getpos|||
magic_getsig|||
magic_getsubstr|||
magic_gettaint|||
magic_getuvar|||
magic_getvec|||
magic_get|||
magic_killbackrefs|||
magic_len|||

ppport.h  view on Meta::CPAN

magic_setpack|||
magic_setpos|||
magic_setregexp|||
magic_setsig|||
magic_setsubstr|||
magic_settaint|||
magic_setutf8|||
magic_setuvar|||
magic_setvec|||
magic_set|||
magic_sizepack|||

ppport.h  view on Meta::CPAN

sv_setsv_mg|5.004050||p
sv_setsv_nomg|5.007002||p
sv_setsv|||
sv_setuv_mg|5.004050||p
sv_setuv|5.004000||p
sv_tainted||5.004000|
sv_taint||5.004000|
sv_true||5.005000|
sv_unglob|||
sv_uni_display||5.007003|
sv_unmagic|||
sv_unref_flags||5.007001|
sv_unref|||
sv_untaint||5.004000|
sv_upgrade|||
sv_usepvn_flags||5.009004|
sv_usepvn_mg|5.004050||p
sv_usepvn|||
sv_utf8_decode||5.006000|

ppport.h  view on Meta::CPAN

sys_init||5.010000|n
sys_intern_clear|||
sys_intern_dup|||
sys_intern_init|||
sys_term||5.010000|n
taint_env|||
taint_proper|||
tmps_grow||5.006000|
toLOWER|||
toUPPER|||
to_byte_substr|||
to_uni_fold||5.007003|

ppport.h  view on Meta::CPAN

#  define PL_stdingv                stdingv
#  define PL_sv_arenaroot           sv_arenaroot
#  define PL_sv_no                  sv_no
#  define PL_sv_undef               sv_undef
#  define PL_sv_yes                 sv_yes
#  define PL_tainted                tainted
#  define PL_tainting               tainting
#  define PL_tokenbuf               tokenbuf
/* Replace: 0 */
#endif

/* Warning: PL_parser

ppport.h  view on Meta::CPAN

#ifndef PERL_MAGIC_sigelem
#  define PERL_MAGIC_sigelem             's'
#endif

#ifndef PERL_MAGIC_taint
#  define PERL_MAGIC_taint               't'
#endif

#ifndef PERL_MAGIC_uvar
#  define PERL_MAGIC_uvar                'U'
#endif

 view release on metacpan or  search on metacpan

lib/Apache2/TaintRequest.pm  view on Meta::CPAN

use strict;
use warnings;

=head1 NAME

Apache2::TaintRequest - HTML Escape tainted data to prevent CSS Attacks

=head1 SYNOPSIS

 use Apache2::TaintRequest ();

lib/Apache2/TaintRequest.pm  view on Meta::CPAN

=cut

use Apache2::RequestRec;
use HTML::Entities ();
use Taint qw(tainted);

our $VERSION = '0.01';

use base 'Apache2::RequestRec';

lib/Apache2/TaintRequest.pm  view on Meta::CPAN

    foreach my $value (@data) {

        # Dereference scalar references.
        $value = $$value if ref $value eq 'SCALAR';

        # Escape any HTML content if the data is tainted.
        $value = escape_html($value) if tainted($value);
    }

    $self->{request}->SUPER::print(@data);
}

lib/Apache2/TaintRequest.pm  view on Meta::CPAN

potential cross site scripting attacks.  Frequently this involves many
calls to HTML::Entities::escape_html().

This module aims to automate this tedious process.  It overrides the
print mechanism in the mod_perl Apache module.  The new print method
tests each chunk of text for taintedness.  If it is tainted we assume
the worst and html-escape it before printing.

Note that this module requires that you have the line 

  PerlSwitches -T

 view release on metacpan or  search on metacpan

lib/Apache2/WebApp/Plugin/Filters.pm  view on Meta::CPAN

    $text =~ s/<!--filtered-->//g;
    return $text;
}

#----------------------------------------------------------------------------+
# untaint_html($markup)
#
# Remove restricted HTML tags and attributes.

sub untaint_html {
    my ( $self, $markup ) 
      = validate_pos( @_,
          { type => OBJECT },
          { type => SCALAR }
          );

lib/Apache2/WebApp/Plugin/Filters.pm  view on Meta::CPAN

Remove all HTML tags and attributes.

  my $result = $c->plugin('Filters')->strip_html($markup);

=head2 untaint_html

Remove restricted HTML tags and attributes.

  my $result = $c->plugin('Filters')->untaint_html($markup);

Supported tags:

  a blockquote br dd dl div em font form img input hr h1 h2 h3 h4 h5 h6
  label legend li ol option p pre ul script select small span strong style

 view release on metacpan or  search on metacpan

lib/HTTPD/Bench/ApacheBench.pm  view on Meta::CPAN

The body of any response which comes back larger than the B<buffersize>
applicable to it may be truncated to zero length.  If you expect to receive
responses larger than the default 256K buffersize, make sure to set your
$run->buffersize() big enough for the largest page you anticipate receiving.

If you are running in perl's taint-checking mode, and you pass tainted data
to ApacheBench (e.g. a tainted URL), it will barf.  Don't ask me why.

HTTP Proxy support needs to be expanded to allow for a username and
password.

=head1 AUTHORS

 view release on metacpan or  search on metacpan

lib/App/Basis.pm  view on Meta::CPAN

sub run_cmd
{
    my ( $cmd, $timeout ) = @_ ;

    # use our local version of path so that it can pass taint checks
    local $ENV{PATH} = $ENV{PATH} ;

    # pass everything thought encode incase there is utf8 there
    utf8::encode($cmd) ;

 view release on metacpan or  search on metacpan

scripts/csv2tsv  view on Meta::CPAN

   --help en : 英文マニュアルを表示する
   --version : このプログラムのバージョン情報を表示する。

  開発上のメモ: 
   * テストを書くべし。
   * taintを検出すべく-T を指定していたが、ヘルプのために perldoc が起動できなくなったので、-tにした。

=cut

 view release on metacpan or  search on metacpan

Changes  view on Meta::CPAN

Revision history for App-Bootstrap-Perl

0.18      2021-09-17
        - additional --silentnotaint build option

0.17      2021-09-16
        - introduce --(no)taintsupport build option to build Perl
          with -DNO_TAINT_SUPPORT and name subdirs accordingly
        - generate 'mycpan' wrapper tool which pre-points to Config

0.16      2019-04-26
        - no more App::Cpan usage, back to simple/stupid mode

 view release on metacpan or  search on metacpan

lib/App/BorgRestore.pm  view on Meta::CPAN

our $VERSION = "3.4.5";

use App::BorgRestore::Borg;
use App::BorgRestore::DB;
use App::BorgRestore::Helper qw(untaint);
use App::BorgRestore::PathTimeTable::DB;
use App::BorgRestore::PathTimeTable::Memory;
use App::BorgRestore::Settings;

use autodie;

lib/App/BorgRestore.pm  view on Meta::CPAN

process during method execution since this is required by C<`borg extract`>.

=cut

method restore($path, $archive, $destination) {
	$destination = untaint($destination, qr(.*));
	$path = untaint($path, qr(.*));

	$log->infof("Restoring %s to %s from archive %s", $path, $destination, $archive->{archive});

	my $basename = path($path)->basename;
	my $components_to_strip =()= $path =~ /\//g;

	$log->debugf("CWD is %s", getcwd());
	{
		$log->debugf("Changing CWD to %s", $destination);
		mkdir($destination) unless -d $destination;
		my $workdir = pushd($destination, {untaint_pattern => qr{^(.*)$}});

		my $final_destination = abs_path($basename);
		$final_destination = untaint($final_destination, qr(.*));
		$log->debugf("Removing %s", $final_destination);
		File::Path::remove_tree($final_destination);
		$self->{deps}->{borg}->restore($components_to_strip, $archive->{archive}, $path);
	}
	$log->debugf("CWD is %s", getcwd());

 view release on metacpan or  search on metacpan

lib/App/CELL/Guide.pm  view on Meta::CPAN

=head2 Taint mode

Since it imports configuration data at runtime from files supplied by the
user, L<App::CELL> should not be run under taint mode. The C<< load >>
routine checks this and will refuse to do anything if running with C<-T>.

To recapitulate: don't run L<App::CELL> in taint mode.


=head2 Installation issues with CELL internal sharedir

The easiest way to install L<App::CELL> is to use a package manager (e.g.

 view release on metacpan or  search on metacpan

t/runtests  view on Meta::CPAN

#!/bin/sh

# Usage:
#   runtests [-T] [prefix]
#
# Runs all tests (or those starting with prefix),optionally in taint mode

if [ -z "$TI_MODE" ]; then
   TI_MODE='inter'
   export TI_MODE
fi

t/runtests  view on Meta::CPAN

   App_CPANtoRPM_RELEASE_TESTING=1
   export App_CPANtoRPM_RELEASE_TESTING
fi

if [ "$1" = "-T" ]; then
   taint="-T -I../lib -I."
   shift
else
   taint=
fi

subset=$1

for test in ${subset}*.t ;do
  perl $taint ./$test
done

 view release on metacpan or  search on metacpan

inc/My/Module/Build.pm  view on Meta::CPAN

            unshift @inc, catdir($self->base_dir(), $self->blib, 'lib'),
                catdir($self->base_dir(), $self->blib, 'arch');
        } else {
            unshift @inc, catdir($self->base_dir(), 'lib');
        }
        # Parse shebang line to set taintedness properly:
        local *TEST;
        open(TEST, $files_to_test[0]) or die
            "Can't open $files_to_test[0]. $!\n";
        my $shebang = <TEST>;
        close(TEST) or print "Can't close $files_to_test[0]. $!\n";
        my $taint = ( $shebang =~ /^#!.*\bperl.*\s-\w*([Tt]+)/ );
        my ($perl) = ($^X =~ m/^(.*)$/); # Untainted
        system($perl, "-d",
               ($taint ? ("-T") : ()),
               (map { ("-I" => $_) } @inc),
               $files_to_test[0], "-emacs");
        return;
    }

inc/My/Module/Build.pm  view on Meta::CPAN

1;

BOGON

my ($perl) = ($^X =~ m/^(.*)$/); # Untainted
chdir($fakemoduledir);

my $pipe = new IO::Pipe();
$pipe->reader($perl, "$fakemoduledir/Build.PL");
my $log = join('', <$pipe>);

 view release on metacpan or  search on metacpan

lib/App/Chart/Gtk2/Ex/LineClipper.pm  view on Meta::CPAN

for instance you might just pass 20 pixels if you know you never draw lines
wider than that.  A width 0 is interpreted as a 1 pixel "thin line", the
same as happens in the GC.

If C<$points> is an empty array, or an array of just one X,Y point, then
nothing at all is drawn.  This handling of one point adds certainty to what
plain C<< $win->draw_lines >> does; for it a single X,Y of a 0-width "thin
line" might or might not be drawn, depending on the server.

=back

 view release on metacpan or  search on metacpan

t/cme-command.t  view on Meta::CPAN

use App::Cme ;
use Config::Model 2.148 qw/initialize_log4perl/;

# WARNING: these tests check the output of cme command. This output is
# created with Log4Perl to User class with INFO level.
# if present, ~/.log4config-model must containt the lines:
#     log4perl.logger.User = INFO, PlainMsgOnScreen
#     log4perl.additivity.User = 0

# work around a problem in IO::TieCombine (used by App::Cmd::Tester)
# to avoid messing up output of stderr of tested command (See

 view release on metacpan or  search on metacpan

lib/App.pm  view on Meta::CPAN

        &App::sub_exit($context) if ($App::trace);
        return($context);
    }
    my $class = shift;
    if ($class =~ /^([A-Za-z0-9:_]+)$/) {
        $class = $1;  # untaint the $class
        if (! $used{$class}) {
            $self->use($class);
        }
        my $method = ($#_ > -1) ? shift : "new";
        if (wantarray) {

 view release on metacpan or  search on metacpan

Daemon.pm  view on Meta::CPAN

###########################################
sub appname {
###########################################
    my $appname = basename($0);

      # Make sure -T regards it as untainted now
    ($appname) = ($appname =~ /([\w-]+)/);

    return $appname;
}

Daemon.pm  view on Meta::CPAN

    open FILE, "<$pidfile" or LOGDIE "Cannot open pidfile $pidfile";
    flock FILE, LOCK_SH;
    my $pid = <FILE>;
    chomp $pid if defined $pid;
    close FILE;
    $pid =~ /^(\d+)$/; # Untaint
    return $1;
}

###########################################
sub pid_file_process_running {

 view release on metacpan or  search on metacpan

Changes  view on Meta::CPAN

Release history for Perl extension App::Devbot.

0.001004 2014-06-30T20:17+03:00
 - Untaint --server and --port (RT #96836) - Thanks Philipp Gortan!
 - Recommend POE::Component::SSLify

0.001003 2014-03-17T01:55+02:00
 - Update Changes to CPAN::Changes::Spec format
 - Use a git repository

 view release on metacpan or  search on metacpan

scripts/dex  view on Meta::CPAN

  our @ISA       = qw(Exporter);
  our @EXPORT_OK = qw(
    blessed refaddr reftype weaken unweaken isweak
  
    dualvar isdual isvstring looks_like_number openhandle readonly set_prototype
    tainted
  );
  our $VERSION    = "1.59";
  $VERSION =~ tr/_//d;
  
  require List::Util; # List::Util loads the XS

scripts/dex  view on Meta::CPAN

  Scalar::Util - A selection of general-utility scalar subroutines
  
  =head1 SYNOPSIS
  
      use Scalar::Util qw(blessed dualvar isdual readonly refaddr reftype
                          tainted weaken isweak isvstring looks_like_number
                          set_prototype);
                          # and other useful utils appearing below
  
  =head1 DESCRIPTION
  

scripts/dex  view on Meta::CPAN

  Sets the prototype of the function given by the C<$code> reference, or deletes
  it if C<$prototype> is C<undef>. Returns the C<$code> reference itself.
  
      set_prototype \&foo, '$$';
  
  =head2 tainted
  
      my $t = tainted( $var );
  
  Return true if C<$var> is tainted.
  
      $taint = tainted("constant");       # false
      $taint = tainted($ENV{PWD});        # true if running under -T
  
  =head1 DIAGNOSTICS
  
  Module use may give one of the following errors during import.
  

 view release on metacpan or  search on metacpan

t/lib/Test/RRA/Config.pm  view on Meta::CPAN

=item @COVERAGE_SKIP_TESTS

Directories under F<t> whose tests should be skipped when doing coverage
testing.  This can be tests that won't contribute to coverage or tests that
don't run properly under Devel::Cover for some reason (such as ones that use
taint checking).  F<docs> and F<style> will always be skipped regardless of
this setting.

=item @CRITIC_IGNORE

Additional files or directories to ignore when doing recursive perlcritic

 view release on metacpan or  search on metacpan

config/to_blead/File-Spec/.dualLivedDiffConfig  view on Meta::CPAN

  lib/File/Spec.pm: lib/File/Spec.pm
  Cwd.pm: lib/Cwd.pm
  Cwd.xs: ext/Cwd/Cwd.xs
  Changes: ext/Cwd/Changes
  t/cwd.t: ext/Cwd/t/cwd.t
  t/taint.t: ext/Cwd/t/taint.t
  t/win32.t: ext/Cwd/t/win32.t
  t/crossplatform.t: lib/File/Spec/t/crossplatform.t
  t/Functions.t: lib/File/Spec/t/Functions.t
  t/rel2abs2rel.t: lib/File/Spec/t/rel2abs2rel.t
  t/Spec.t: lib/File/Spec/t/Spec.t

 view release on metacpan or  search on metacpan

lib/App/ErrorCalculator.pm  view on Meta::CPAN

C<partial_derivative(a * x + b, x)>. (Would evaluate to C<a>.)

In order to allow for errors in constants, the program uses the
L<Math::SymbolicX::Error> parser extension: use the
C<error(1 +/- 0.2)> function to include constants with
associated uncertainties in your formulas.

The input files may be of any format recognized by the
L<Spreadsheet::Read> module. That means: Excel sheets,
OpenOffice (1.0) spreadsheets, CSV (comma separated values)
text files, etc.

 view release on metacpan or  search on metacpan

lib/App/Fetchware.pm  view on Meta::CPAN

=over

=item LIMITATIONS
Uses gpg command line, and the interface to gpg is a little brittle.
Crypt::OpenPGP is buggy and not currently maintainted again, so fetchware cannot
make use of it, so were stuck with using the command line gpg program.

=back

=over

 view release on metacpan or  search on metacpan

lib/App/FonBot/Plugin/Email.pm  view on Meta::CPAN

sub email_handle_new{
	for my $file (bsd_glob 'Maildir/new/*', GLOB_NOSORT) {
		my $email=Email::MIME->new(scalar read_file $file);

		#untaint $file
		$file =~ /^(.*)$/;
		$file = $1;

		unlink $file;
		return unless defined $email;

 view release on metacpan or  search on metacpan

lib/App/GitFind/PathClassMicro.pm  view on Meta::CPAN

sub is_dir { 0 }

sub _spec_class {
  my ($class, $type) = @_;

  die "Invalid system type '$type'" unless ($type) = $type =~ /^(\w+)$/;  # Untaint
  my $spec = "File::Spec::$type";
  ## no critic
  eval "require $spec; 1" or die $@;
  return $spec;
}

 view release on metacpan or  search on metacpan

lib/App/Greple/wordle/word_all.pm  view on Meta::CPAN

table
taboo
tacit
tacky
taffy
taint
taken
taker
tally
talon
tamer

 view release on metacpan or  search on metacpan

kritika.fatpack  view on Meta::CPAN

$fatpacked{"Test/MonkeyMock.pm"} = '#line '.(1+__LINE__).' "'.__FILE__."\"\n".<<'TEST_MONKEYMOCK';
  package Test::MonkeyMock;use strict;use warnings;require Carp;our$VERSION='0.05';my$registry={};my$magic_counter=0;sub new {my$class=shift;$class=ref$class if ref$class;my ($instance)=@_;my$new_package;if ($instance){$new_package=__PACKAGE__ .'::' ...
TEST_MONKEYMOCK

$fatpacked{"Test/TempDir/Tiny.pm"} = '#line '.(1+__LINE__).' "'.__FILE__."\"\n".<<'TEST_TEMPDIR_TINY';
  use 5.006002;use strict;use warnings;package Test::TempDir::Tiny;our$VERSION='0.05';use Exporter 5.57 qw/import/;our@EXPORT=qw/tempdir in_tempdir/;use Carp qw/confess/;use Cwd qw/abs_path/;use Errno qw/EEXIST ENOENT/;{no warnings 'numeric';use File...
TEST_TEMPDIR_TINY

$fatpacked{"Try/Tiny.pm"} = '#line '.(1+__LINE__).' "'.__FILE__."\"\n".<<'TRY_TINY';
  package Try::Tiny;use 5.006;our$VERSION='0.05';use strict;use warnings;use Exporter 5.57 'import';our@EXPORT=our@EXPORT_OK=qw(try catch finally);use Carp;$Carp::Internal{+__PACKAGE__}++;BEGIN {my$su=$INC{'Sub/Util.pm'}&& defined&Sub::Util::set_subn...
TRY_TINY

 view release on metacpan or  search on metacpan

share/modules.skip  view on Meta::CPAN

Find::Lib                             ; 1.02        ; symlink test fail, https://rt.cpan.org/Ticket/Display.html?id=69019
Fuse                                  ; 0.1600      ; 0.16.1 not indexed on cpan
Getopt::Lucid                         ; 0.19        ; unparsable version in current version 0.19
HTML::Table                           ; 2.08        ; 2.08a shipped
HTML::Tidy                            ; 1.52        ; broken upstream
Inline                                ; 0.48        ; taint test fail, https://rt.cpan.org/Ticket/Display.html?id=65703
IO::Async                             ; 0.41        ; stream-4encoding.t test fail, https://rt.cpan.org/Ticket/Display.html?id=69020
Lingua::Features                      ; 0.3         ; cpanplus lost with version
Linux::Prctl                          ; 1.005       ; rt#79909
Makefile::AST                         ; 0.215       ; https://rt.cpan.org/Ticket/Display.html?id=77738 / https://rt.cpan.org/Ticket/Display.html?id=77737
Module::Depends                       ; 0.16        ; https://rt.cpan.org/Public/Bug/Display.html?id=37051

 view release on metacpan or  search on metacpan

Changes  view on Meta::CPAN

0.005 2015-04-02T22:51+03:00
 - Add a javascript player
 - Add example CSS
 - Drop JSON
 - Drop taint mode
 - Update the default template

0.004 2014-10-25T15:20+03:00
 - Add MP4 support
 - Use tags from all versions of a file, not just from the first one

 view release on metacpan or  search on metacpan

capture-stderr  view on Meta::CPAN

# Stolen shamelessly from:
# http://api.metacpan.org/source/PETDANCE/ack-1.96/capture-stderr

use strict;

# Untaint our arguments (we're very trusting):
my $stderr  = shift or die 'No stderr';
my $program = shift or die 'No program';

for ( $stderr, $program ) {
  /^(.+)$/ or die;

 view release on metacpan or  search on metacpan

public/javascripts/ace/mode-csound_document.js  view on Meta::CPAN

            }, {
                token : "punctuation.operator",
                regex : /[.](?![.])/
            }, {
                token : "support.function",
                regex : /(s(?:h(?:ift|ow(?:Mod(?:elessDialog|alDialog)|Help))|croll(?:X|By(?:Pages|Lines)?|Y|To)?|t(?:op|rike)|i(?:n|zeToContent|debar|gnText)|ort|u(?:p|b(?:str(?:ing)?)?)|pli(?:ce|t)|e(?:nd|t(?:Re(?:sizable|questHeader)|M(?:i(?:nutes...
            }, {
                token : "support.function.dom",
                regex : /(s(?:ub(?:stringData|mit)|plitText|e(?:t(?:NamedItem|Attribute(?:Node)?)|lect))|has(?:ChildNodes|Feature)|namedItem|c(?:l(?:ick|o(?:se|neNode))|reate(?:C(?:omment|DATASection|aption)|T(?:Head|extNode|Foot)|DocumentFragment|Pr...
            }, {
                token :  "support.constant",

 view release on metacpan or  search on metacpan

lib/App/Netdisco/AnyEvent/Nbtstat.pm  view on Meta::CPAN

sub _on_read {
    my ( $self, $resp, $peer ) = @_;

    ($resp) = $resp =~ /^(.*)$/s
        if AnyEvent::TAINT && $self->{untaint};

    # Find our task
    my $request = $self->{_tasks}{$peer};

    return unless $request;