From: Chris Morris <home@...>
Date: 2002-04-05T08:30:04+09:00
Subject: RE: Is eval a code/design smell?

> Seems to me that providing methods to set instance variables in an
> object is a potential security flaw in it's own right:
>
>    bank.grab_iv("account_no")
>
>    backup_process.set_iv(:backup_cmd, "rm -rf")

Is there anything in Ruby that prevents me adding an accessor for these
instance vars?:

  class BankData
    def get_acct_no
      @account_no
    end
  end

  class BackupProcess
    def backup_cmd=(value)
      @backup_cmd = value
    end
  end