summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
Diffstat (limited to 'doc')
-rw-r--r--doc/coding-standard.tex6
1 files changed, 6 insertions, 0 deletions
diff --git a/doc/coding-standard.tex b/doc/coding-standard.tex
index 23cf445e..d66af33c 100644
--- a/doc/coding-standard.tex
+++ b/doc/coding-standard.tex
@@ -65,4 +65,10 @@ In general, when more than one line of code is being copied and
pasted, it should instead be moved into its own function where it can
be called by all entry points.
+\section{Security Practices}
+\subsection{Open}
+Perl's Open command should be called using its 3-argument form. The 2-argument
+form is considered dangerous because input could be used to override the file
+mode.
+
\end{document}