From: Phil Ross <phil.ross@...>
Date: 2009-04-17T04:56:28+09:00
Subject: Re: SecurityError requiring gems and other files with $SAFE=1 in Ruby 1.9.1

Eric Hodel wrote:
> This is likely the issue:
> 
> $ ruby19 -rpp -e '$SAFE = 1; pp $LOAD_PATH.map { |path| [path,
> path.tainted?] }'
> 
> Please file a bug.

I am seeing that the gem lib paths are tainted, but the current 
directory is not. I am seeing the SecurityError requiring files from 
gems and from the current directory though.

I've just tried running

$LOAD_PATH.each {|p| p.untaint}

to untaint each entry in the load path. The load path entries all become 
untainted, but SecurityErrors are still raised when running require.

Regards,

Phil
-- 
Posted via http://www.ruby-forum.com/.