From: Mike Wilson <wmwilson01@...>
Date: 2003-12-24T23:38:48+09:00
Subject: Re: Configuration Files

>From: "John W. Long" <ws@johnwlong.com>
>Reply-To: ruby-talk@ruby-lang.org
>To: ruby-talk@ruby-lang.org (ruby-talk ML)
>Subject: Configuration Files
>Date: Thu, 18 Dec 2003 13:01:10 +0900
>
>A while back someone submitted some code to this list for evaluating
>Configuration files in the style of:
>
>% cat test.config
>editor.spacespertab = 4
>toolbar.visible = true
>statusbar.visible = false
>. . .
>
>One of the great things about their code was that it enabled you to use 
>ruby
>code within your configuration file so you could do things like this
>

Doesn't this have some security implications?  I'm not really sure that I 
can think of any applications that you'd want to let a user configure, but 
that runs as root, but if there was one, I wouldn't want to be evaling code 
from the config.  As I said, I'm not sure this is a valid concern on my 
part, just more of a thought.  Could it maybe be configurable from the app?  
eval = true; if eval ...

_________________________________________________________________
Make your home warm and cozy this winter with tips from MSN House & Home.  
http://special.msn.com/home/warmhome.armx