From: Caius Durling <caius@...>
Date: 2011-01-11T19:55:53+09:00
Subject: Re: DATA.seek allows to read file

On 11 Jan 2011, at 09:03, Robert Klemme wrote:

> In other words, I can read what's before __END__ if I simply seek.
> IMHO that is a bad thing and may even be used for attacks.


I've written a script in the past that (ab)used that to use DATA as a small datastore, rather than writing out to a separate data file. I had to write out the entire file though, including the source code, so being able to just seek back to 0 and read from there was helpful for writing the script.

C
---
Caius Durling
caius@caius.name
+44 (0) 7960 268 100
http://caius.name/