use Perl

• what about multiple values? (Score:1)

  by podmaster (3169)

  Maybe i'm missing it, but they don't seem to be handled at all (which is a shortcoming)
  
  E:\>perl - 1=a 1=b 1=c 1=d
  use CGI qw[ param Vars ];
  use CGI::Untaint;
  my $u = CGI::Untaint->new( Vars() );
  print "$_\n" for $u->extract(-as_printable => 1);
  warn 1;
  print "$_\n" for param(1);
  __END__
  1 at - line 5.
  a
  b
  c
  d
  
  • Re:what about multiple values? (Score:2)

    by 2shortplanks (968)

    Mutliple values do work, though it's not quite how you might expect. Since you're populating your instance of CGI::Untaint using CGI's Vars method, things that have multiple values are seperated by NUL (\0), as documented in the CGI perldoc.

    What I normally do in this situation is have my _untaint_re check that each of the things seperated by \0 match what I'm checking, and then have my is_valid do a quick

    $self->valid([split /\0/, $self->value]);
    • Re:what about multiple values? (Score:3, Informative)

      by 2shortplanks (968)

        $self->value([split /\0/, $self->value]);

      even.
      • Re:what about multiple values? (Score:2, Insightful)

        by podmaster (3169)

        Sure you could do that, but i don't think you should need to. I think CGI::Untaint could be more, you know, convenient :)
        • Re:what about multiple values? (Score:1)

          by tmtm (2563) on 2003.12.08 12:20 (#26355) Homepage Journal

          Patches welcome :)

          Reply to This

          Parent