Add config option use taint

README.pod

@@ -190,6 +190,8 @@ This extension contributes the following settings:
 
 =item * C<sudoUser>: optional, if set run debug process with sudo -u \<sudoUser\>.
 
+=item * C<useTaintForDebug>: optional, if true run debug process with -T (taint mode).
+
 =item * C<containerCmd>: If set debugger runs inside a container. Options are: 'docker', 'docker-compose', 'podman', 'kubectl'
 
 =item * C<containerArgs>: arguments for containerCmd. Varies depending on containerCmd.

clients/vscode/perl/README.md

@@ -118,6 +118,7 @@ This extension contributes the following settings:
 * `cwd`: optional, change working directory before launching the debuggee
 * `reloadModules`: if true, automatically reload changed Perl modules while debugging
 * `sudoUser`: optional, if set run debug process with sudo -u \<sudoUser\>.
+* `useTaintForDebug`: optional, if true run debug process with -T (taint mode).
 * `containerCmd`: If set debugger runs inside a container. Options are: 'docker', 'docker-compose', 'podman', 'kubectl'
 * `containerArgs`: arguments for containerCmd. Varies depending on containerCmd.
 * `containerMode`: To start a new container, set to 'run', to debug inside an existing container set to 'exec'. Note: kubectl only supports 'exec'

clients/vscode/perl/package.json

@@ -206,6 +206,11 @@
  "description": "optional, if set run debug process with sudo -u <sudoUser>.",
  "default": null
  },
+ "useTaintForDebug": {
+ "type": "boolean",
+ "description": "optional, if set run debug process in taint mode.",
+ "default": false
+ },
  "pathMap": {
  "type": "array",
  "default": null,

lib/Perl/LanguageServer.pm

@@ -809,6 +809,8 @@ This extension contributes the following settings:
 
 =item * C<sudoUser>: optional, if set run debug process with sudo -u \<sudoUser\>.
 
+=item * C<useTaintForDebug>: optional, if true run debug process with -T (taint mode).
+
 =item * C<containerCmd>: If set debugger runs inside a container. Options are: 'docker', 'docker-compose', 'podman', 'kubectl'
 
 =item * C<containerArgs>: arguments for containerCmd. Varies depending on containerCmd.

lib/Perl/LanguageServer/DebuggerInterface.pm

@@ -1702,6 +1702,12 @@ sub init
  my $remote ;
  my $port ;
  ($remote, $port) = split /:/, $ENV{PLSDI_REMOTE} ;
+ if ($remote =~ m/^([0-9.]+)$/) {
+ $remote = $1; # untaint
+ }
+ if ($port =~ m/^(\d+)$/) {
+ $port = $1; # untaint
+ }
 
  $socket = IO::Socket::INET->new(PeerAddr => $remote,
  PeerPort => $port,

lib/Perl/LanguageServer/DebuggerProcess.pm

@@ -51,6 +51,12 @@ has 'sudo_user' =>
  is => 'ro',
  ) ; 
 
+has 'use_taint_for_debug' =>
+ (
+ isa => 'Bool',
+ is => 'rw'
+ ) ;
+
 has 'path_map' =>
  (
  isa => 'Maybe[ArrayRef]',
@@ -106,6 +112,7 @@ sub BUILDARGS
  $args -> {stop_on_entry} = delete $args -> {stopOnEntry}?1:0 ;
  $args -> {session_id} = delete $args -> {__sessionId} || $session_cnt ;
  $args -> {sudo_user} = delete $args -> {sudoUser} ;
+ $args -> {use_taint_for_debug} = delete $args -> {useTaintForDebug} ;
  my $map = delete $args -> {pathMap} ;
  if ($map)
  {
@@ -228,6 +235,10 @@ sub launch
  push @sudoargs, "PERL5DB=$ENV{PERL5DB}" ;
  push @sudoargs, "PLSDI_SESSION=$ENV{PLSDI_SESSION}" ;
  }
+ if ($self->use_taint_for_debug)
+ {
+ push @inc, "-T" ;
+ }
 
  if (ref $self -> args) # ref is array
  {