summaryrefslogtreecommitdiff
path: root/systems/texlive/tlnet/tlpkg/tlperl/lib/Safe.pm
diff options
context:
space:
mode:
authorNorbert Preining <norbert@preining.info>2021-04-02 03:20:54 +0000
committerNorbert Preining <norbert@preining.info>2021-04-02 03:20:54 +0000
commit3f173002d4a4a84e7d1fa5a74755fdd00d08a9c2 (patch)
tree5ed380344702de1f9ab53b68b6c3bcd6b8458087 /systems/texlive/tlnet/tlpkg/tlperl/lib/Safe.pm
parentf78ba658b3ecd56053fe0837a4404d0c6c16a707 (diff)
CTAN sync 202104020320
Diffstat (limited to 'systems/texlive/tlnet/tlpkg/tlperl/lib/Safe.pm')
-rw-r--r--systems/texlive/tlnet/tlpkg/tlperl/lib/Safe.pm11
1 files changed, 9 insertions, 2 deletions
diff --git a/systems/texlive/tlnet/tlpkg/tlperl/lib/Safe.pm b/systems/texlive/tlnet/tlpkg/tlperl/lib/Safe.pm
index e9f096713d..6bc74540be 100644
--- a/systems/texlive/tlnet/tlpkg/tlperl/lib/Safe.pm
+++ b/systems/texlive/tlnet/tlpkg/tlperl/lib/Safe.pm
@@ -3,7 +3,7 @@ package Safe;
use 5.003_11;
use Scalar::Util qw(reftype refaddr);
-$Safe::VERSION = "2.40";
+$Safe::VERSION = "2.41_01";
# *** Don't declare any lexicals above this point ***
#
@@ -543,6 +543,13 @@ outside the compartment) placed into the compartment. For example,
=head1 WARNING
+The Safe module does not implement an effective sandbox for
+evaluating untrusted code with the perl interpreter.
+
+Bugs in the perl interpreter that could be abused to bypass
+Safe restrictions are not treated as vulnerabilities. See
+L<perlsecpolicy> for additional information.
+
The authors make B<no warranty>, implied or otherwise, about the
suitability of this software for safety or security purposes.
@@ -753,7 +760,7 @@ any I<further> compilation that the already compiled code may try to perform.
This is particularly useful when applied to code references returned from reval().
(It also provides a kind of workaround for RT#60374: "Safe.pm sort {} bug with
--Dusethreads". See L<http://rt.perl.org/rt3//Public/Bug/Display.html?id=60374>
+-Dusethreads". See L<https://rt.perl.org/rt3//Public/Bug/Display.html?id=60374>
for I<much> more detail.)
=head2 wrap_code_refs_within (...)