• Inviting everyone who uses WordPress management tools in Plesk
    The Plesk team is conducting a 60-minute research session that includes an interview and a moderated usability test.
    To participate, please use this link .
    Your experience will help shape product decisions and ensure the tools better support real-world use cases.

Curious About Perl Taint Check

C

carliebentley

Guest
I've been digging through all the conf files and the conf file for perl has an option as follows:

# Uncomment this line to enable taint checking globally. When Perl is
# running in taint mode various checks are performed to reduce the
# risk of insecure data being passed to a subshell or being used to
# modify the filesystem. Unfortunatly many Perl modules are not
# taint-safe, so you should exercise care before enabling it on a
# production server.
#
#PerlTaintCheck On

Would it be possible to enable this (by uncommenting it) to further help prevent Perl vulnerabilities?

Anyone fooled with this? Or is there anyone with a test box that could try enabling this and see how it affects Plesk 8 and daily operation?
 
Back
Top