From: matz@... (Yukihiro Matsumoto)
Date: 2002-11-22T01:40:13+09:00
Subject: Re: untainted, unfrozen, honest-to-god session data!

Hi,

In message "Re: untainted, unfrozen, honest-to-god session data!"
    on 02/11/22, Patrick May <patrick-may@monmouth.com> writes:

|> Session data are tainted, because they are external.  Maybe there's a
|> smarter way to untaint trusted external data.  But I have no idea
|> right now.  Currently, You have to remove taintedness by yourself
|> using "untaint".
|
|The session data is not external, but the _key_ is.  I don't know how
|this changes the discussion, but it seems important to me.

Ah, I meant "external" as data read from the file.  Session data is
published to the file, then read from the file.

							matz.