showing error Insecure dependency in parameter 3 of DBI::db=HASH(0xa32bd40)->do method call while running with -T switch

Question

i got the error Insecure dependency in parameter 3 of DBI::db=HASH(0xa32bd40)->do method call while running with -T switch while i modified the file show_bug.cgi

what is the reason?

Answer 1

To untaint a variable, you must match it against a capturing regular expression. See perlsec - Perl Security for details.

Answer 2

To untaint ie. variable $unsecure, a regular expression should be applied

my ($secure) = $unsecure =~ / (\d+) /x
  or die q{we couldn't find number in $unsecure};