Re: Upcoming change to perl: current directory in @INC
Hello,
On 29 August 2016 at 14:39, Dominic Hargreaves <dom@earth.li> wrote:
> tl;dr: '.' is being removed from perl's @INC by default; some breakage
> in apps expected.
>
> For some years[1], it's been known that perl's habit of including '.'
> in its module load path, (@INC) is potentially dangerous, since it
> can allow untrusted code to be run under certain circumstances. However,
> for most of that time it wasn't taken that seriously, particularly as the
> fix is quite disruptive.
Other languages do that too. E.g. python, Doesn't python have the same
concerns then too?
--
Regards,
Dimitri.
Reply to: