From: David Flanagan <david@...>
Date: 2007-09-13T07:55:37+09:00
Subject: require runs files with $SAFE=0

Hi,

I've never seen this documented anywhere, but I just discovered, while 
browsing the source code, that require loads files with $SAFE set to 0 
even when the code that calls require has a higher value set...

I assume that this is done as a pragmatic matter because there are 
modules in the standard library that would not load correctly at a 
higher safe level.

I further assume that this is not considered a security hole because if 
$SAFE > 0 then require will refuse to load any file in a world-writable 
directory.

Are my assumptions correct here?

	David