From: Arlen Cuss <celtic@...>
Date: 2008-03-08T08:17:13+09:00
Subject: Re: Dynamic class thingies? (Okay, not sure how to title this one)

------=_Part_38815_23953777.1204931840315
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi,

On Sat, Mar 8, 2008 at 3:24 AM, coigner <coignerATgmail@spammers.fry> wrote:

> Does and thanks. Though I'd already started getting it to work with eval.
> Which do you think is better? Or does it matter?


I think const_get - in general, though not always - is better. It's a very
broad tool, and doesn't convey your intentions correctly. It also means that
if -- somehow -- some unsafe input ends up in eval, a malicious user could
put whatever they want and have the code executed (e.g. "File.unlink('/*')"
...), whereas there's not so much a threat with const_get.

Arlen

------=_Part_38815_23953777.1204931840315--