local.conf
.
The main thing you need to worry about is that incoming path names are no
longer filtered for special characters. There is a new routine called
&main'safeopen
that can
be used to open files with names derived from user data. The rest shouldn't
affect code in the gateway itself (unless you want to use the new query
facilities to preprocess the query data).
&main'safeopen("package'FH", $file);
to open files (it works just like open
but always opens
$file for read-only). Of course, if you open files that
are defined within your program then there is no danger as always.
local.conf
and has a new (easier to use) syntax.
$pstring = &main'printable($string)
converts binary data
to a printable string for using in the document itself and
@fields = &main'splitquery($query);
which splits the
query on ``+'' and converts the %## escapes to data (which means
that you must be careful using $query data, as always).