From: matz@... (Yukihiro Matsumoto)
Date: 2001-01-09T02:19:18+09:00
Subject: [ruby-talk:8884] Re: Sandbox (again)

Hi,

In message "[ruby-talk:8829] Sandbox (again)"
    on 01/01/08, Clemens Wyss <wys@helbling.ch> writes:

|As you can see 'system' and 'require' are not accessible, all the "rest"
|is. Also, tainted level is set to 2 (by default). The print method is
|only overloaded in order to fetch the "print" statements in the
|eval-uated code. Now I am pretty sure that I missed some "security
|holes". Could you therefore please comment on this proposal. 

Well, there are e.g.

  Kernel.print

The level 3 of $SAFE is just designed for your purpose.  If hole
remains, it's my fault, not yours. ;-)

|Clemens (the other ;-))

Ruby may attract persons with this particular name.

							matz.