perl-security

Taint mode secures Perl web applications by marking external input as unsafe until explicitly untainted via strict allowlist validation. This Skill provides guidance on enabling taint checking and applying untainting patterns to safely handle CGI, Mojolicious, and Dancer2 inputs.

Preventing SQL injection in Perl DBI scripts requires using parameterized queries with placeholders instead of interpolated strings. This Skill enforces guarded I/O practices by teaching parameterized DBI query construction to separate code from untrusted data.

Validating user input in Perl command-line tools safely involves applying allowlist validation and length constraints to sanitize external data. This Skill teaches input validation strategies that ensure only expected data formats are accepted before processing.

Yes, this approach works for securing Catalyst and Mojolicious frameworks by applying universal web security best practices. It addresses XSS, CSRF, secure sessions, and header protections specifically tailored for these Perl web environments.

Executing system commands safely from Perl scripts requires using the list-form of system calls to avoid shell interpolation vulnerabilities. This Skill demonstrates safe process execution patterns to prevent command injection attacks.

Perl security analysis should use perlcritic policies that enforce taint checking, input validation, and safe DBI usage. This Skill integrates static analysis via perlcritic security policies to improve code safety and maintainability across your application.