From: ts <decoux@...>
Date: 2002-11-25T02:25:28+09:00
Subject: Re: Ruby/PHP security

>>>>> "S" == Simon Cozens <simon@simon-cozens.org> writes:

S> Well-written PHP is precisely as secure as well-written Ruby; I'm not
S> sure what one might mean by the idea of security in a high-level
S> programming language. They all do what you tell them. If you tell them
S> to use user-supplied data in a system call, they'll do it. If you don't,
S> they won't.

 Sometimes ruby just don't want

pigeon% ruby -e '$SAFE = 4; File.open("aa")'
-e:1:in `open': Insecure operation - open (SecurityError)
        from -e:1
pigeon% 


Guy Decoux