From: Ernest Ellingson <erne@...>
Date: 2005-10-25T04:12:01+09:00
Subject: More on mod_ruby and gems

Here is the output from apache's error_log.

[Mon Oct 24 11:25:38 2005] [error] mod_ruby: 
/usr/local/lib/ruby/site_ruby/1.8/rubygems/custom_require.rb:21:in 
`require__': Insecure operation - require__ (SecurityError)
[Mon Oct 24 11:25:38 2005] [error] mod_ruby:   from 
/usr/local/lib/ruby/site_ruby/1.8/rubygems/custom_require.rb:21:in `require'
[Mon Oct 24 11:25:38 2005] [error] mod_ruby:   from 
/var/www/html/testit.rbx:2


Is there a way to overcome the SecurityError.

require__ looks to be an alias for kernel.require.


Is it possible to untaint this object?

Ernie