From: Florian Gross <flgr@...>
Date: 2004-09-03T03:35:19+09:00
Subject: Re: Not just $SAFE, but damn $SAFE

ts wrote:

> F> It is easily breakable because of singleton methods. I've attached 
> F> safe.rb which ought to be secure now (hello ts ;)) that 
> F> ObjectSpace.define_finalizer doesn't allow one to escape the sandbox 
> F> anymore.
> 
>  Sincerely I don't understand (I know, I'm stupid) but why don't you define
>  classes that you want to trust and give a result only when an object
>  belong to theses classes ?

An user might want to use the sandbox with custom classes. And I'm not 
sure if the check should be applied recursively or if an user is 
expected to be careful himself.

Regards,
Florian Gross