From: matz@... (Yukihiro Matsumoto)
Date: 2002-12-01T19:53:24+09:00
Subject: Re: Symbols and tainting

Hi,

In message "Symbols and tainting"
    on 02/12/01, Tim Bates <tim@bates.id.au> writes:

|I notice that calling String#intern on a tainted string returns an untainted 
|symbol. Is this behaviour correct, does it continue for higher values of 
|$SAFE, and is it secure? What ramifications might using this have?

Since Symbols are immediate values, there's no way to taint them.
I haven't think of this issue before.  Hmm.  Maybe interning from
tainted strings should be prohibited on higer $SAFE level.

							matz.