Skip to main content

Module security

Module security 

Source
Expand description

Security-focused lint checks

This module provides lint checks that detect common security anti-patterns in Perl code. These are patterns that perl -c and PPI cannot catch because they require AST-level analysis.

§Diagnostic codes

CodeSeverityDescription
security-two-arg-openWarningopen(FH, ">file") – use 3-arg open for safety
security-string-evalWarningeval "$string" – string eval is a security risk
security-backtick-execInformationBacktick/qx command execution detected

Functions§

check_security
Check for security anti-patterns