From: stesch@... (Stefan Scholl)
Date: 2001-10-15T00:43:36+09:00
Subject: [ruby-talk:22515] Re: cgi parameters not tainted?

On 2001-10-14 13:11:54Z, Stefan Scholl <stesch@no-spoon.de> wrote:
> But when I check the parameters with the method "tainted?" they
> are all untainted.
> I don't know how this could happen. ENV['QUERY_STRING'] is
> tainted.


OK, to have a secure script I have to say

        Param = CGI.parse(ENV['QUERY_STRING'])

instead of

        Param = Cgi.params


But it's no real solution.