From: Bertram Scharpf <lists@...>
Date: 2007-01-09T23:09:33+09:00
Subject: PlRuby(Postgres) and require

Hi,

in PlRuby I am defining functions and I would like to load
some library:

  create function dummy() returns void language 'plruby' as $$
    require "yaml"
  $$;
  select dummy();

This yields in an "ERROR: Insecure operation - require". At
least the string "yaml"s tainted state is a reason for this.
Inside the library classes will be defined (i.e. constants
will be set) what is prohibited, too.

It is a very easy excercise to modify the PlRuby library so
that it loads "yaml" before $SAFE is set. But then the
system is no longer compatible to others. The question I
would like to ask therefore is more elaborate:

What other ways are there and which is the _best_ way to
include a library?

Thanks in advance,

Bertram


-- 
Bertram Scharpf
Stuttgart, Deutschland/Germany
http://www.bertram-scharpf.de