kentfredric

1. CGI.pm is shit
2. CGI is shit
3. <"ARGV"> shouldn't work under use strict because thats a string dereferencing a symbolic ref.
4. Hash Keys can't retain tainting and so can be used to propagate un-vetted data into safe spaces:

  my $hash = unsafe_thing_that_returns_a_hash();
  $dbh->query(join keys %{$hash}); # data will be untained regardless of what it is.

5. CGI.pm should probably do something smarter than simply returning the first param when >1 params

scraperdragon

dict([[h.partition(':')[0], h.partition(':')[2]] for h in rawheaders.split('\n')])