From: "Mean L." <lists@...>
Date: 2012-10-19T22:12:30+09:00
Subject: Re: is an untrusted binding that does not close over anything, in practice trusted

def context_binding
  @context.instance_eval {binding}
end

def eval(str)
  ->{$SAFE = 4; context_binding.eval(str)}.()
end


 So, to clarify and expand, my biding is untrusted because it's
 constructed in the $SAFE=4 sandbox.  Which means the untrusted sandbox
 code can modify it.  So the question is, am I correct that in my usage,
 the binding does not close over anything (other than self which refers
 to a trusted object) so does not allow to modify anything, which in
 effect makes it as if trusted.


Is there a more appropriate list for this question?

-- 
Posted via http://www.ruby-forum.com/.