In perl.git, the branch blead has been updated <http://perl5.git.perl.org/perl.git/commitdiff/ee1ec05fa88c0444e7d8e506b018b9b80be61dd0?hp=215554907820e516fc559dea0dba9cc33d63e205>
- Log ----------------------------------------------------------------- commit ee1ec05fa88c0444e7d8e506b018b9b80be61dd0 Author: Karl Williamson <pub...@khwilliamson.com> Date: Wed Feb 19 09:37:51 2014 -0700 perllocale: Add note about ENVIRONMENT variable This variable is part of the environment, but wasn't previously mentioned. M pod/perllocale.pod commit 18512f39426552e29d41a84a0ee5636d24f7ad84 Author: Karl Williamson <pub...@khwilliamson.com> Date: Wed Feb 19 09:36:39 2014 -0700 perlsec: Nit M pod/perlsec.pod ----------------------------------------------------------------------- Summary of changes: pod/perllocale.pod | 9 +++++++++ pod/perlsec.pod | 5 +++-- 2 files changed, 12 insertions(+), 2 deletions(-) diff --git a/pod/perllocale.pod b/pod/perllocale.pod index 5a3a325..62a2d8b 100644 --- a/pod/perllocale.pod +++ b/pod/perllocale.pod @@ -1113,6 +1113,15 @@ of a match involving C<\w> while C<use locale> is in effect. =over 12 +=item PERL_SKIP_LOCALE_INIT + +This environment variable, available starting in Perl v5.20, and if it +evaluates to a TRUE value, tells Perl to not use the rest of the +environment variables to initialize with. Instead, Perl uses whatever +the current locale settings are. This is particularly useful in +embedded environments, see +L<perlembed/Using embedded Perl with POSIX locales>. + =item PERL_BADLANG A string that can suppress Perl's warning about failed locale settings diff --git a/pod/perlsec.pod b/pod/perlsec.pod index e480cb3..703bd46 100644 --- a/pod/perlsec.pod +++ b/pod/perlsec.pod @@ -183,8 +183,9 @@ But testing for taintedness gets you only so far. Sometimes you have just to clear your data's taintedness. Values may be untainted by using them as keys in a hash; otherwise the only way to bypass the tainting mechanism is by referencing subpatterns from a regular expression match. -Perl presumes that if you reference a substring using $1, $2, etc., that -you knew what you were doing when you wrote the pattern. That means using +Perl presumes that if you reference a substring using $1, $2, etc. in a +non-tainting pattern, that +you knew what you were doing when you wrote that pattern. That means using a bit of thought--don't just blindly untaint anything, or you defeat the entire mechanism. It's better to verify that the variable has only good characters (for certain values of "good") rather than checking whether it -- Perl5 Master Repository