From: Phlip Date: 2004-01-28T10:09:57+09:00 Subject: Re: MiniRubyWiki in action? Don Dwoske wrote: > I would have used it, but my ISP does not offer Ruby. Don't worry, I'm > plugging for it... The big problem is MRW couples to its own little server. > I ended up using a wiki written in AWK > > http://www.awk-scripting.de/cgi/wiki.cgi/yawk/00-WikiIndex Everybody stop writing new Wikis!! Except me!! > I also read somewheres that MiniRubyWiki had some security concerns do > to use of evals in the source code, but didn't dig into it that much. That was me - it's simply because I disregarded security, while adding features that let users author Ruby code inside MRW pages. However, someone once told me they turned on Ruby's built-in taint checking, and it locked down that loophole. -- Phlip