From: Chris Date: 2002-11-21T00:15:08+09:00 Subject: Re: untainted, unfrozen, honest-to-god session data! I'd prefer a real solution (you know, CGI::Session::MemoryLikeFileStore), but at this point even a workaround would be nice. So, like I was saying... ----- Original Message ----- Well, after closer inspection, I think I have narrowed down the freezing problem some. The problem seems to be with Hash objects only. All of the keys of the session hash are frozen. All of the keys of all of the hashes *in* the session hash are also frozen. And everything, everything is tainted, except for Fixnums, true, false, and nil. ---------------------------- I guess I should have said that all non-immediate values were tainted. But I forgot Symbols! Indeed, symbols are not tainted, either. Also, if I use symbols for my hash keys, they are not frozen, either. Since I was (at least so far) only using Strings for my hash keys, I could switch to symbols with no real problem... right? My concern is Marshalling symbols. I thought that Symbols weren't necessarily always the same. Now in mod_ruby, the ruby program is always running, right? So the Symbols would always be the same unless I restarted httpd, right? I could detect that easily enough. Still, does this seem like a bad idea to anyone? Like I said, I just want my session back, just like I left it! Many thanks, Chris