XML exploits?

2009-08-06 Thread Dirk Koopman
Anybody care to try this out at home? http://www.codenomicon.com/labs/xml/ As refered to by: http://www.theregister.co.uk/2009/08/06/xml_flaws/ Dirk

Re: Sub-refs in @INC screwing with your modules

2009-08-06 Thread Aaron Crane
On Wed, Aug 5, 2009 at 9:32 PM, Uri Guttman wrote: > this works: > >  perl -le 'open my $fh, q{<}, \q{print q{bar}}; unshift @INC, sub {print > q{foo}; $fh }; require baz' > > i tried putting the open inside the sub and i get this error: > > Recursive call to Perl_load_module in PerlIO_find_layer

Re: Sub-refs in @INC screwing with your modules

2009-08-06 Thread David Cantrell
On Thu, Aug 06, 2009 at 09:44:24AM +0100, Aaron Crane wrote: > Apparently open-from-a-string internally loads a module to do its magic: > $ perl -le 'print scalar keys %INC; open my $fh, "<", \""; print for > keys %INC' > 0 > XSLoader.pm > PerlIO/scalar.pm > PerlIO.pm > So you can make th

Re: Sub-refs in @INC screwing with your modules

2009-08-06 Thread Dagfinn Ilmari Mannsåker
David Cantrell writes: > * use Data::Dumper to stringify the %params, but that doesn't handle > subrefs $Data::Dumper::Deparse = 1; -- ilmari "A disappointingly low fraction of the human race is, at any given time, on fire." - Stig Sandbeck Mathisen

Re: [ANNOUNCE] Reminder: London.pm social meet, Thursday evening

2009-08-06 Thread the hatter
On Mon, 3 Aug 2009, David Cantrell wrote: > Early birds please grab a couple of tables outside if it's a nice day! I reckon I'll be there from 5:30ish, anyone else planning on being there around then ? the hatter

Re: Sub-refs in @INC screwing with your modules

2009-08-06 Thread David Cantrell
On Thu, Aug 06, 2009 at 02:49:41PM +0100, Dagfinn Ilmari Manns?ker wrote: > David Cantrell writes: > > * use Data::Dumper to stringify the %params, but that doesn't handle > > subrefs > $Data::Dumper::Deparse = 1; Don't think that handles closures. Indeed, I don't see how turning your code int