Skip to main content
assistive.skiplink.to.breadcrumbs
assistive.skiplink.to.header.menu
assistive.skiplink.to.action.menu
assistive.skiplink.to.quick.search
Log in
Confluence
Spaces
Hit enter to search
Help
Online Help
Keyboard Shortcuts
Feed Builder
What’s new
Available Gadgets
About Confluence
Log in
SEI CERT Perl Coding Standard
Pages
Boards
Space shortcuts
Dashboard
Secure Coding Home
Android
C
C++
Java
Perl
Page tree
Browse pages
Configure
Space tools
View Page
A
t
tachments (0)
Page History
Page Information
View in Hierarchy
View Source
Export to PDF
Export to Word
Pages
…
SEI CERT Perl Coding Standard
4 Back Matter
AA. Bibliography
Page Information
Title:
AA. Bibliography
Author:
David Svoboda
Nov 14, 2011
Last Changed by:
David Svoboda
Jan 09, 2013
Tiny Link:
(useful for email)
https://wiki.sei.cmu.edu/confluence/x/olxMBQ
Export As:
Word
·
PDF
Incoming Links
SEI CERT Perl Coding Standard (42)
Page:
EXP04-PL. Do not mix the early-precedence logical operators with late-precedence logical operators
Page:
EXP03-PL. Do not diminish the benefits of constants by assuming their values in expressions
Page:
DCL02-PL. Any modified punctuation variable should be declared local
Page:
EXP30-PL. Do not use deprecated or obsolete functions or modules
Page:
IDS30-PL. Exclude user input from format strings
Page:
EXP31-PL. Do not suppress or ignore exceptions
Page:
EXP37-PL. Do not use the one-argument form of select()
Page:
DCL31-PL. Do not overload reserved keywords or subroutines
Page:
EXP32-PL. Do not ignore function return values
Page:
DCL30-PL. Do not import deprecated modules
Page:
IDS00-PL. Canonicalize path names before validating them
Page:
IDS33-PL. Sanitize untrusted data passed across a trust boundary
Page:
IDS01-PL. Use taint mode while being aware of its limitations
Page:
STR30-PL. Capture variables should be read only immediately after a successful regex match
Page:
EXP33-PL. Do not invoke a function in a context for which it is not defined
Page:
MSC01-PL. Detect and remove unused variables
Page:
EXP34-PL. Do not modify $_ in list or sorting functions
Page:
INT00-PL. Do not prepend leading zeroes to integer literals
Page:
IDS31-PL. Do not use the two-argument form of open()
Page:
DCL05-PL. Prohibit Perl4 package names
Page:
EXP00-PL. Do not return undef
Page:
DCL03-PL. Do not read a foreach iterator variable after the loop has completed
Page:
FIO00-PL. Do not use bareword file handles
Page:
OOP00-PL. Do not signify inheritence at runtime
Page:
DCL01-PL. Do not reuse variable names in subscopes
Page:
DCL00-PL. Do not use subroutine prototypes
Page:
DCL33-PL. Declare identifiers before using them
Page:
STR31-PL. Do not pass string literals to functions expecting regexes
Page:
DCL04-PL. Always initialize local variables
Page:
IDS34-PL. Do not pass untrusted, unsanitized data to a command interpreter
Page:
IDS32-PL. Validate any integer that is used as an array index
Page:
EXP35-PL. Use the correct operator type for comparing values
Page:
Risk Assessment
Page:
FIO01-PL. Do not operate on files that can be modified by untrusted users
Page:
IDS35-PL. Do not invoke the eval form with a string argument
Page:
OOP31-PL. Do not access private variables or subroutines in other packages
Page:
MSC02-PL. Run programs with full warnings and strict checking
Page:
MSC30-PL. Do not use comma to separate statements
Page:
EXP06-PL. Do not use an array in an implicit scalar context
Page:
MSC00-PL. Detect and remove dead code
Page:
EXP01-PL. Do not depend on the return value of functions that lack a return statement
Page:
OOP32-PL. Prohibit indirect object call syntax
Hierarchy
Parent Page
Page:
4 Back Matter
Labels
Global Labels (2)
bm
section
Recent Changes
Time
Editor
Jan 09, 2013 13:45
David Svoboda
View Changes
Jan 09, 2013 13:45
David Svoboda
View Changes
Jan 09, 2013 13:23
David Svoboda
View Changes
Dec 15, 2012 19:47
Carol J. Lallier
View Changes
Dec 15, 2012 19:39
Carol J. Lallier
View Page History
Outgoing Links
External Links (21)
https://www.securecoding.cert.org/confluence/display/perl/C…
perldoc.perl.org
archives.neohapsis.com/archives/fulldisclosure/2005-12/0066…
grouper.ieee.org/groups/754/
www.cert.org/books/secure-coding
www.oreillynet.com/onlamp/blog/2006/11/perls_taint_mode_to_…
www.opengroup.org/onlinepubs/9699919799
perldoc.perl.org/
www.cpan.org
gunther.web66.com/FAQS/taintmode.html
www.network-theory.co.uk/docs/gccintro/index.html
www.stonehenge.com/merlyn/UnixReview/col33.html
https://metacpan.org/about/resources
search.cpan.org/~nwclark/perl-5.8.8/ext/B/B/Lint.pm
www.microsoft.com/mspress/books/5957.aspx
www.kb.cert.org/vuls/id/282403
https://www.securecoding.cert.org/confluence/display/perl/M…
https://www.kb.cert.org/vuls/id/948385
cpansearch.perl.org/src/MARKSTOS/CGI.pm-3.59/cgi_docs.html#…
www.kb.cert.org/vuls/id/671444
www.cpan.org/
SEI CERT Perl Coding Standard (1)
Home page:
SEI CERT Perl Coding Standard
Overview
Content Tools
{"serverDuration": 82, "requestCorrelationId": "f74b0d5921dc8d91"}