http://blog.gerv.net/2014/10/new-class-of-vulnerability-in-perl-web-applications