From: Dave Thomas <Dave@...>
Date: 2000-05-09T22:53:39-05:00
Subject: [ruby-talk:02678] Re: Tainting

Dave Thomas <Dave@thomases.com> writes:

> I'm trying to document all the various taint checks in the
> interpreter. So far I have:

Oops - I forgot CheckSafeStr and the following:

  \item Can't manipulate a directory whose name is a tainted string.
  \item Can't glob tainted strings.
  \item Can't eval tainted strings.
  \item Can't load or require a file whose name is a tainted string.
  \item Can't manipulate a file or pipe whose name is a tainted string.
  \item Can't execute a system command from a tainted string.


Dave