diff options
| author | Steffen Mueller <smueller@cpan.org> | 2013-03-15 10:21:12 +0100 |
|---|---|---|
| committer | Steffen Mueller <smueller@cpan.org> | 2013-03-15 10:21:12 +0100 |
| commit | d22722a1b35e2d075cbe401a4f4fbcc541f488e0 (patch) | |
| tree | 0381fb9918cf62b58b82ca53be38b53d314be64c /dist/Data-Dumper | |
| parent | 940a04b39217e2aa30e922aa13a992903adec835 (diff) | |
| download | perl-d22722a1b35e2d075cbe401a4f4fbcc541f488e0.tar.gz | |
Add security warning about eval'ing DD output
As if it isn't obvious, but, well, people do it.
Diffstat (limited to 'dist/Data-Dumper')
| -rw-r--r-- | dist/Data-Dumper/Dumper.pm | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/dist/Data-Dumper/Dumper.pm b/dist/Data-Dumper/Dumper.pm index d5d25ed365..595c043d14 100644 --- a/dist/Data-Dumper/Dumper.pm +++ b/dist/Data-Dumper/Dumper.pm @@ -836,7 +836,8 @@ variable is output in a single Perl statement. Handles self-referential structures correctly. The return value can be C<eval>ed to get back an identical copy of the -original reference structure. +original reference structure. (Please do consider the security implications +of eval'ing code from untrusted sources!) Any references that are the same as one of those passed in will be named C<$VAR>I<n> (where I<n> is a numeric suffix), and other duplicate references |