I'm using Perl for the first time for production software and I have some trust issues with it. When I use the unpack()
function, is it safe to use user input in the TEMPLATE
string? I'm using a TEMPLATE
like "Z$user_controlled"
to read a string value to a variable. The constant $user_controlled
is defined external source that the user can control. Am I taking a risk? Can an attacker do something bad if he changes the TEMPLATE
string into something weird?
EDIT: Changed the wording to be more generic.