Question

I’ve recently been learning perl and am wondering what frameworks are available for creating a web app. I’m mostly concerned about security, so if there are any security-specific web frameworks you’d recommend, I’d be more interested in those.

Currently accepted answer from thread below

Answer 1

This thread on perlmonks has some info regarding Catalyst (which is the most modern/powerful Perl Web development framework) in security context.

For overall comparison, there are several of them linked in “Comparisons” section of Web Frameworks/Perl5 Wiki

Also, please remember that the main problem security wise is the developer – you can write hole-ridden code in the most secure framework if you don’t have proper security-centric outlook in your development (that was the main point given to us in our secure web development training, and I happen to agree).

Also, as per Brian’s question in the comment, these are a couple of helpful general “web security in Perl” links:

• CGI Programming with Perl book (Duh) – Chapter 8. Security
• W3C CGI Security FAQ – especially Q14 and Q15 (exec and taint checks)
• Security Issues in Perl Scripts
• Perl Security and Regular Expressions