From: matz@... (Yukihiro Matsumoto)
Date: 2002-12-02T23:56:54+09:00
Subject: Re: Symbols and tainting

Hi,

In message "Re: Symbols and tainting"
    on 02/12/02, Paul Brannan <pbrannan@atdesk.com> writes:

|> Since Symbols are immediate values, there's no way to taint them.
|> I haven't think of this issue before.  Hmm.  Maybe interning from
|> tainted strings should be prohibited on higer $SAFE level.
|
|Perhaps in higher $SAFE levels sym.id2name should create only tainted
|strings, too.

It does now.

  ruby -e 'p Thread.start{$SAFE=4; "foo".intern.id2name.tainted?}.value'

							matz.