I'm using Perl for the first time for production software and I have some trust issues with it. When I use the
unpack() function, is it safe to use user input in the
TEMPLATE string? I'm using a
"Z$user_controlled" to read a string value to a variable. The constant
$user_controlled is defined external source that the user can control. Am I taking a risk? Can an attacker do something bad if he changes the
TEMPLATE string into something weird?
EDIT: Changed the wording to be more generic.