From: Sean Russell <ser@...>
Date: 2002-05-07T06:34:37+09:00
Subject: RE: Taintedness inheritence

Morris, Chris wrote:

> Sean's REXML does some processing of the strings to support different
> encodings (calling unpack and pack, I believe), but nothing else really

Chris is right.  For the record, "fixing" this in REXML would be really 
easy, and probably wouldn't slow it down much; I'd just copy the 
taintedness attribute in a couple of places.  I'm more concerned about the 
philosophy behind taintedness -- yes, Strings are the prominent risk zones, 
but taint is an attribute on all objects, and I'd expect the general 
behavior to be the same across classes.  It isn't, though, and I want to 
make sure that REXML does the "right" thing WRT taintedness.

--- SER