SEI
GitHub
CERT Secure Coding
  • Home
  • SEI CERT Perl Coding Standard
    • Front Matter
    • Rules
    • Recommendations
      • Declarations and Initialization (DCL)
      • Expressions (EXP)
      • File Input and Output (FIO)
      • Input Validation and Data Sanitization (IDS)
        • IDS00-PL. Canonicalize path names before validating them
        • IDS01-PL. Use taint mode while being aware of its limitations
      • Integers (INT)
      • Miscellaneous (MSC)
      • Object-Oriented Programming (OOP)
      • Strings (STR)
    • Back Matter

Input Validation and Data Sanitization (IDS)

  • IDS00-PL. Canonicalize path names before validating them
  • IDS01-PL. Use taint mode while being aware of its limitations

Information for Editors
In order to have a new guideline automatically listed above be sure to label it ids and recommendation .

Risk Assessment Summary

RuleSeverityLikelihoodRemediation CostPriorityLevel
IDS00-PLMediumUnlikelyMediumP4L3
IDS01-PLMediumProbableMediumP8L2

FIO01-PL. Do not operate on files that can be modified by untrusted usersIDS00-PL. Canonicalize path names before validating them

On this page

Risk Assessment Summary
SEI
  • www.cmu.edu

© 2026 Carnegie Mellon University

  • Legal
  • Privacy Policy