From: "Nicolas V." <lists@...>
Date: 2013-03-22T09:53:29+09:00
Subject: Re: Ruby tainting on primitives

That is actually where I'm coming from. Some JSON is coming from an 
external source, and I would like to track the parsed content.

The default JSON parser has its own set of problems:

(main) > json = '{"key":"value"}';
(main) > json.taint
=> "{\"key\":\"value\"}"
(main) > json.tainted?
=> true
(main) > JSON.parse(json).tainted?
=> false
(main) > JSON.parse(json)['key'].tainted?
=> false

Assuming this is easily fixable, I would like to track the parsed data, 
especially numbers.

I don't use tainting to achieve some level of security, but to perform 
various optimization in a distributed algorithm.

-- 
Posted via http://www.ruby-forum.com/.